cvegen

december 2025

cves
5,493
against an average 2025 month
1.4×
busiest day
dec 9, 667
used in real attacks
23

december 2025 brought 5,493 cves, 1.4 times an average 2025 month.

14 of its 31 days ran above the 2025 average for that weekday.

667

on dec 9, the busiest day.

429

rated critical, cvss 9 or higher. 352 of them can be hit over the network with no login and nothing for a user to click.

784

came in three single drops: the linux kernel team 322 on dec 24, the linux kernel team 244 on dec 30, patchstack 218 on dec 18.

23 already used in real attacks

cisa kev, as of oct 24, 2026

  • 3
    apple products
    dec 12, 17
  • 2
    android framework
    dec 8
  • 1
    meta react server components
    dec 3
  • 1
    arrayos
    dec 5
  • 1
    langflow
    dec 5
  • 1
    fortinet products
    dec 9
  • 1
    microsoft windows
    dec 9
  • 1
    gogs
    dec 10
  • 1
    gladinet centrestack and triofox
    dec 12
  • 1
    google chromium
    dec 12
and 10 more productsall 23 with cve ids

cisa keeps adding older cves when attacks come to light, so this list can still grow.

this poster

period
december 1 to 31, 2025
cves
5,493
data
cve list v5, cisa kev, drawn 2026-10-24
format
3:4, drawn for 45 × 60 cm
download jpg, 2000 × 2667