Statistiche CVE: dicembre 2025

🌐 Scopri le cifre chiave delle vulnerabilità pubblicate a dicembre 2025 su CVE Find.

🔎 Panoramica

• Numero totale di CVE pubblicate : 5,645 (+81.2% rispetto al mese precedente)
• Vulnerabilità aggiunte al catalogo CISA KEV : 20

📂 Distribuzione per categorie principali

• Cross-site Scripting : 816
• Authorization problems : 673
• SQL Injection : 284
• Overflow : 277
• Cross-Site Request Forgery - CSRF : 191
• Directory Traversal : 138

📈 Distribuzione per punteggio CVSS

• Low : 118
• Medium : 2328
• High : 1867
• Critical : 452

🏢 Fornitori più colpiti

1. microsoft : 137
2. adobe : 135
3. google : 131
4. apple : 114
5. axiomthemes : 58

📦 Prodotti più colpiti

1. adobe experience_manager : 115
2. google android : 111
3. apple macos : 110
4. microsoft windows : 72
5. linux linux_kernel : 52

⚠️ CVE rilevanti del mese

• CVE-2025-52691 (10 CRITICAL) : Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote co...
• CVE-2025-54322 (10 CRITICAL) : Xspeeder SXZOS through 2025-12-26 allows root remote code execution via base64-encoded Python code in the chkid parameter to vLogin.py. The title and oIP parameters are also used.
• CVE-2025-66203 (10 CRITICAL) : StreamVault is a video download integration solution. Prior to version 251126, a Remote Code Execution (RCE) vulnerability exists in the stream-vault application (SpiritApplicat...
• CVE-2025-66209 (10 CRITICAL) : Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.451, an authenticated command injection vulnerabi...
• CVE-2025-14931 (10 CRITICAL) : Hugging Face smolagents Remote Python Executor Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbit...

Esplora tutti i dati in dettaglio su CVE Find.