https://exploit-radar.com/en/flux/categories/os.xml Exploit Radar: Operating systems The latest additions to CISA’s catalog of exploited vulnerabilities in the “Operating systems” category (indicative classification). 2026-09-18T00:00:00Z Exploit Radar https://exploit-radar.com/en/cve/CVE-2025-39682/ CVE-2025-39682 — Linux Kernel 2026-09-18T00:00:00Z Apply the patches or mitigations from Linux; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on September 18, 2026. https://exploit-radar.com/en/cve/CVE-2026-53266/ CVE-2026-53266 — Linux Kernel 2026-09-18T00:00:00Z Apply the patches or mitigations from Linux; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on September 18, 2026. https://exploit-radar.com/en/cve/CVE-2025-39964/ CVE-2025-39964 — Linux Kernel 2026-09-18T00:00:00Z Apply the patches or mitigations from Linux; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on September 18, 2026. https://exploit-radar.com/en/cve/CVE-2026-81963/ CVE-2026-81963 — Microsoft Windows 2026-09-08T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. Start with internet-facing devices. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on September 8, 2026. https://exploit-radar.com/en/cve/CVE-2026-85880/ CVE-2026-85880 — Microsoft Windows 2026-09-08T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. Start with internet-facing devices. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on September 8, 2026. https://exploit-radar.com/en/cve/CVE-2026-53362/ CVE-2026-53362 — Linux Kernel 2026-08-27T00:00:00Z Apply the patches or mitigations from Linux; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on August 27, 2026. https://exploit-radar.com/en/cve/CVE-2015-5287/ CVE-2015-5287 — Red Hat ABRT (Automatic Bug Reporting Tool) 2026-08-26T00:00:00Z Apply the patches or mitigations from Red Hat; if none are available, stop using the product. Start with internet-facing devices. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on August 26, 2026. https://exploit-radar.com/en/cve/CVE-2022-0995/ CVE-2022-0995 — Linux Kernel 2026-08-26T00:00:00Z Apply the patches or mitigations from Linux; if none are available, stop using the product. Start with internet-facing devices. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on August 26, 2026. https://exploit-radar.com/en/cve/CVE-2015-3246/ CVE-2015-3246 — Red Hat libuser 2026-08-26T00:00:00Z Apply the patches or mitigations from Red Hat; if none are available, stop using the product. Start with internet-facing devices. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on August 26, 2026. https://exploit-radar.com/en/cve/CVE-2026-33824/ CVE-2026-33824 — Microsoft Windows 2026-08-18T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. Start with internet-facing devices. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on August 18, 2026. https://exploit-radar.com/en/cve/CVE-2026-65400/ CVE-2026-65400 — Apple macOS (OS X) 2026-08-18T00:00:00Z Apply the patches or mitigations from Apple; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on August 18, 2026. https://exploit-radar.com/en/cve/CVE-2026-68820/ CVE-2026-68820 — Microsoft Windows 2026-08-11T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. Start with internet-facing devices. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on August 11, 2026. https://exploit-radar.com/en/cve/CVE-2022-0492/ CVE-2022-0492 — Linux Kernel 2026-06-02T00:00:00Z Apply the patches or mitigations from Linux; if none are available, stop using the product. For cloud services, follow the guidance from Linux. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on June 2, 2026. https://exploit-radar.com/en/cve/CVE-2008-4250/ CVE-2008-4250 — Microsoft Windows 2026-05-20T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on May 20, 2026. https://exploit-radar.com/en/cve/CVE-2009-1537/ CVE-2009-1537 — Microsoft Windows 2026-05-20T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on May 20, 2026. https://exploit-radar.com/en/cve/CVE-2026-31431/ CVE-2026-31431 — Linux Kernel 2026-05-01T00:00:00Z Apply the patches or mitigations from Linux; if none are available, stop using the product. For cloud services, follow the guidance from Linux. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on May 1, 2026. https://exploit-radar.com/en/cve/CVE-2026-32202/ CVE-2026-32202 — Microsoft Windows 2026-04-28T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on April 28, 2026. https://exploit-radar.com/en/cve/CVE-2023-36424/ CVE-2023-36424 — Microsoft Windows 2026-04-13T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on April 13, 2026. https://exploit-radar.com/en/cve/CVE-2025-60710/ CVE-2025-60710 — Microsoft Windows 2026-04-13T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 14 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on April 13, 2026. https://exploit-radar.com/en/cve/CVE-2008-0015/ CVE-2008-0015 — Microsoft Windows 2026-02-17T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 17, 2026. https://exploit-radar.com/en/cve/CVE-2026-21510/ CVE-2026-21510 — Microsoft Windows 2026-02-10T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 10, 2026. https://exploit-radar.com/en/cve/CVE-2026-21513/ CVE-2026-21513 — Microsoft Windows 2026-02-10T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 10, 2026. https://exploit-radar.com/en/cve/CVE-2026-21519/ CVE-2026-21519 — Microsoft Windows 2026-02-10T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 10, 2026. https://exploit-radar.com/en/cve/CVE-2026-21533/ CVE-2026-21533 — Microsoft Windows 2026-02-10T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 10, 2026. https://exploit-radar.com/en/cve/CVE-2026-21525/ CVE-2026-21525 — Microsoft Windows 2026-02-10T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 10, 2026. https://exploit-radar.com/en/cve/CVE-2026-24061/ CVE-2026-24061 — GNU InetUtils 2026-01-26T00:00:00Z Apply the patches or mitigations from GNU; if none are available, stop using the product. For cloud services, follow the guidance from GNU. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on January 26, 2026. https://exploit-radar.com/en/cve/CVE-2018-14634/ CVE-2018-14634 — Linux Kernel 2026-01-26T00:00:00Z Apply the patches or mitigations from Linux; if none are available, stop using the product. For cloud services, follow the guidance from Linux. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on January 26, 2026. https://exploit-radar.com/en/cve/CVE-2026-20805/ CVE-2026-20805 — Microsoft Windows 2026-01-13T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on January 13, 2026. https://exploit-radar.com/en/cve/CVE-2025-62221/ CVE-2025-62221 — Microsoft Windows 2025-12-09T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on December 9, 2025. https://exploit-radar.com/en/cve/CVE-2025-62215/ CVE-2025-62215 — Microsoft Windows 2025-11-12T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on November 12, 2025. https://exploit-radar.com/en/cve/CVE-2025-59287/ CVE-2025-59287 — Microsoft Windows 2025-10-24T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 24, 2025. https://exploit-radar.com/en/cve/CVE-2025-33073/ CVE-2025-33073 — Microsoft Windows 2025-10-20T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 20, 2025. https://exploit-radar.com/en/cve/CVE-2025-24990/ CVE-2025-24990 — Microsoft Windows 2025-10-14T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 14, 2025. https://exploit-radar.com/en/cve/CVE-2025-59230/ CVE-2025-59230 — Microsoft Windows 2025-10-14T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 14, 2025. https://exploit-radar.com/en/cve/CVE-2025-47827/ CVE-2025-47827 — IGEL OS 2025-10-14T00:00:00Z Apply the patches or mitigations from IGEL; if none are available, stop using the product. For cloud services, follow the guidance from IGEL. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 14, 2025. https://exploit-radar.com/en/cve/CVE-2011-3402/ CVE-2011-3402 — Microsoft Windows 2025-10-06T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 6, 2025. https://exploit-radar.com/en/cve/CVE-2013-3918/ CVE-2013-3918 — Microsoft Windows 2025-10-06T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 6, 2025. https://exploit-radar.com/en/cve/CVE-2021-22555/ CVE-2021-22555 — Linux Kernel 2025-10-06T00:00:00Z Apply the patches or mitigations from Linux; if none are available, stop using the product. For cloud services, follow the guidance from Linux. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 6, 2025. https://exploit-radar.com/en/cve/CVE-2021-43226/ CVE-2021-43226 — Microsoft Windows 2025-10-06T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on October 6, 2025. https://exploit-radar.com/en/cve/CVE-2014-6278/ CVE-2014-6278 — GNU Bash 2025-10-02T00:00:00Z Apply the patches or mitigations from GNU; if none are available, stop using the product. For cloud services, follow the guidance from GNU. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 2, 2025. https://exploit-radar.com/en/cve/CVE-2025-32463/ CVE-2025-32463 — Sudo 2025-09-29T00:00:00Z Apply the patches or mitigations from Sudo; if none are available, stop using the product. For cloud services, follow the guidance from Sudo. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on September 29, 2025. https://exploit-radar.com/en/cve/CVE-2025-38352/ CVE-2025-38352 — Linux Kernel 2025-09-04T00:00:00Z Apply the patches or mitigations from Linux; if none are available, stop using the product. For cloud services, follow the guidance from Linux. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on September 4, 2025. https://exploit-radar.com/en/cve/CVE-2023-0386/ CVE-2023-0386 — Linux Kernel 2025-06-17T00:00:00Z Apply the patches or mitigations from Linux; if none are available, stop using the product. For cloud services, follow the guidance from Linux. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on June 17, 2025. https://exploit-radar.com/en/cve/CVE-2025-33053/ CVE-2025-33053 — Microsoft Windows 2025-06-10T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on June 10, 2025. https://exploit-radar.com/en/cve/CVE-2025-30400/ CVE-2025-30400 — Microsoft Windows 2025-05-13T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 13, 2025. https://exploit-radar.com/en/cve/CVE-2025-32701/ CVE-2025-32701 — Microsoft Windows 2025-05-13T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 13, 2025. https://exploit-radar.com/en/cve/CVE-2025-32706/ CVE-2025-32706 — Microsoft Windows 2025-05-13T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 13, 2025. https://exploit-radar.com/en/cve/CVE-2025-32709/ CVE-2025-32709 — Microsoft Windows 2025-05-13T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 13, 2025. https://exploit-radar.com/en/cve/CVE-2025-30397/ CVE-2025-30397 — Microsoft Windows 2025-05-13T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 13, 2025. https://exploit-radar.com/en/cve/CVE-2025-24054/ CVE-2025-24054 — Microsoft Windows 2025-04-17T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on April 17, 2025.