CVE-2025 records published in January 2025

This page lists the 1,854 CVE-2025 records published in January 2025, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists eight of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2025 list filters these records by severity or signal.

Critical

1578.5% of these records

Listed in CISA KEV

80.4% of these records

Reported exploited

20.1% of these records

Detection signal

130.7% of these records

Exploit code

311.7% of these records

Actionable vendor fix

1,04456.3% of these records

Figures as of 2026-10-24 13:47 UTC. Records published in January 2025 have had from about 21 months to about 22 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.