CVE-2025 records published in December 2025

This page lists the 4,374 CVE-2025 records published in December 2025, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 23 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2025 list filters these records by severity or signal.

Critical

51011.7% of these records

Listed in CISA KEV

230.5% of these records

Reported exploited

30.1% of these records

Detection signal

902.1% of these records

Exploit code

1242.8% of these records

Actionable vendor fix

2,84064.9% of these records

Figures as of 2026-10-24 13:47 UTC. Records published in December 2025 have had from about 10 months to about 11 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.