Update KEV: Fri Jun 6 00:13:03 UTC 2025

Signed-off-by: AboutCode Automation <[email protected]>

Author: aboutcode-automation

known_exploited_vulnerabilities.json

@@ -1,9 +1,25 @@
 {
     "title": "CISA Catalog of Known Exploited Vulnerabilities",
-    "catalogVersion": "2025.06.03",
-    "dateReleased": "2025-06-03T16:48:39.9414Z",
+    "catalogVersion": "2025.06.05",
+    "dateReleased": "2025-06-05T18:02:07.1325Z",
     "count": 1360,
     "vulnerabilities": [
+        {
+            "cveID": "CVE-2025-5419",
+            "vendorProject": "Google",
+            "product": "Chromium V8",
+            "vulnerabilityName": "Google Chromium V8 Out-of-Bounds Read and Write Vulnerability",
+            "dateAdded": "2025-06-05",
+            "shortDescription": "Google Chromium V8 contains an out-of-bounds read and write vulnerability that could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",
+            "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
+            "dueDate": "2025-06-26",
+            "knownRansomwareCampaignUse": "Unknown",
+            "notes": "https:\/\/chromereleases.googleblog.com\/2025\/06\/stable-channel-update-for-desktop.html;   https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2025-5419\",",
+            "cwes": [
+                "CWE-125",
+                "CWE-787"
+            ]
+        },
         {
             "cveID": "CVE-2025-21479",
             "vendorProject": "Qualcomm",
@@ -205,7 +221,7 @@
             "product": "Endpoint Manager Mobile (EPMM)",
             "vulnerabilityName": "Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability",
             "dateAdded": "2025-05-19",
-            "shortDescription": "Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability in the API component that allows an authenticated attacker to remotely execute arbitrary code via crafted API requests. This vulnerability results from an insecure implementation of the Hibernate Validator open-source library.",
+            "shortDescription": "Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability in the API component that allows an authenticated attacker to remotely execute arbitrary code via crafted API requests. This vulnerability results from an insecure implementation of the Hibernate Validator open-source library, as represented by CVE-2025-35036.",
             "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
             "dueDate": "2025-06-09",
             "knownRansomwareCampaignUse": "Unknown",
@@ -259,21 +275,6 @@
                 "CWE-78"
             ]
         },
-        {
-            "cveID": "CVE-2025-4664",
-            "vendorProject": "Google",
-            "product": "Chromium",
-            "vulnerabilityName": "Google Chromium Loader Insufficient Policy Enforcement Vulnerability",
-            "dateAdded": "2025-05-15",
-            "shortDescription": "Google Chromium contains an insufficient policy enforcement vulnerability that allows a remote attacker to leak cross-origin data via a crafted HTML page.",
-            "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
-            "dueDate": "2025-06-05",
-            "knownRansomwareCampaignUse": "Unknown",
-            "notes": "https:\/\/chromereleases.googleblog.com\/2025\/05\/stable-channel-update-for-desktop_14.html ; https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2025-4664",
-            "cwes": [
-                "CWE-346"
-            ]
-        },
         {
             "cveID": "CVE-2025-32756",
             "vendorProject": "Fortinet",