Zed
Records
1
Disclosed CVEs
1
Exploited (sev 3–4)
0
CISA KEV flagged
0
Newest record 2025-12-17 · 1 distinct CVE id · open in the explorer (the explorer matches the first product a record names, so it can list fewer)
Patch now: confirmed exploitation or KEV · 0
Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.
No record for Zed has confirmed exploitation or a KEV flag.
Disclosures by month · last 24 months
█
Nov ’241 disclosed · peak 1 in Dec ’25Oct ’26
Disclosed CVEs, no confirmed exploitation · 1
- 2025-12-17CVE-2025-68433CVE-2025-68433: Arbitrary code execution in Zed IDE via Model Context Protocol config2 Disclosedmcp
This page lists what has been reported, not what to do about it. Versions and fixes are in each linked advisory; check the vendor’s own advisory before acting.