Windows / Linux kernel 2025 KEV highlights
Windows: CLFS CVE-2025-29824 (KEV 8 Apr, ransomware).
- Disclosed
What happened
- Linux: CVE-2024-53104 UVC (KEV 5 Feb 2025), CVE-2023-0386 OverlayFS (KEV Jun 2025), CVE-2024-1086 (ransomware use flagged Oct 2025).
Live scores
Live scores
CVE-2023-0386- EPSS
- 0.079
some chance of attack soon - VEDAS
- 0.985
strong exploit evidence - On CISA KEV
- Yes, since 2025-06-17
- Detection rule
- Out of scope (local)
Thin horizontal line: the “likely” (EPSS 0.10) or “strong” (VEDAS 0.90) threshold. Shaded “no data” areas are periods when cve-scores did not publish. The vertical line is the day CISA added it to its exploited list.
Live scores
CVE-2024-1086- EPSS
- 0.281
likely to be attacked soon - VEDAS
- 0.972
strong exploit evidence - On CISA KEV
- Yes, since 2024-05-30
- Detection rule
- Out of scope (local)
Thin horizontal line: the “likely” (EPSS 0.10) or “strong” (VEDAS 0.90) threshold. Shaded “no data” areas are periods when cve-scores did not publish.
Live scores
CVE-2024-53104- EPSS
- 0.034
some chance of attack soon - VEDAS
- 0.971
strong exploit evidence - On CISA KEV
- Yes, since 2025-02-05
- Detection rule
- Out of scope (local)
Thin horizontal line: the “likely” (EPSS 0.10) or “strong” (VEDAS 0.90) threshold. Shaded “no data” areas are periods when cve-scores did not publish.
Live scores
CVE-2025-29824- EPSS
- 0.193
likely to be attacked soon - VEDAS
- 0.972
strong exploit evidence - On CISA KEV
- Yes, since 2025-04-08
- Detection rule
- Out of scope (local)
Thin horizontal line: the “likely” (EPSS 0.10) or “strong” (VEDAS 0.90) threshold. Shaded “no data” areas are periods when cve-scores did not publish.
Sources
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.