Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 10 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 400,561All CVEsplus 18,890 rejected
  • 402Last 24 hours3,029 in the last 7 days
  • 17,425Last 30 days1,598 of them critical
  • 1,768Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
202605100656
2025167001450
2024293001436
20231138002222

Latest CVEs

56 CVEs, newest first

CVEs, newest first
Title
CVE-2026-0893
Uncleared Password Keystrokes VulnerabilityAMI · AptioV
Medium5.8
CVE-2025-58774
UEFI OOB Write and Buffer Overflow VulnerabilitiesAMI · AptioV
High8.3
CVE-2025-58773
UEFI OOB Write and Buffer Overflow VulnerabilitiesAMI · AptioV
High7.1
CVE-2025-58772
UEFI OOB Write and Buffer Overflow VulnerabilitiesAMI · AptioV
High8.2
CVE-2025-58771
UEFI OOB Write and Buffer Overflow VulnerabilitiesAMI · AptioV
High7.1
CVE-2026-33197
BDS Module Bypass Secure Boot AdvisoryAMI · AptioV
High8.7
CVE-2025-58770
TCG2 TPM RT Not Locked IssueAMI · AptioV
High7.2
CVE-2025-33044
exFat Memory Corruption IssueAMI · AptioV
Medium5.8
CVE-2025-22833
FixupArray Pointer Validation in NTFSAMI · AptioV
Medium4.6
CVE-2025-22832
Buffer Overflow in NTFS when parsing the ATTRIBUTE_LISTAMI · AptioV
Medium5.8
CVE-2025-22831
Buffer Overflow in NTFS when parsing the VOLUME_NAMEAMI · AptioV
Medium5.8
CVE-2025-33045
Legacy Serial Redirection SMRAM VulnerabilitiesAMI · AptioV
High8.2
CVE-2025-22830
SmiFlash Race Condition VulnerabilityAMI · AptioV
High7.3
CVE-2025-22834
ThirdPartyVideo SetVariable VulnerabilityAMI · AptioV
Medium4.2
CVE-2025-33043
SMM buffer IntegrityAMI · AptioV
Medium5.8
CVE-2024-42446
TOCTOU in SmmWheaAMI · AptioV
High7.5
CVE-2024-54084
SMM Arbitrary Write via TOCTOU VulnerabilityAMI · AptioV
High7.5
CVE-2024-54085
Redfish Authentication BypassExploitedAMI · MegaRAC-SPx
Critical10.0
CVE-2024-33659
BiosGuard Buffer Overflow and TOCTOU VulnerabilityAMI · AptioV
Medium5.7
CVE-2024-42444
TOCTOU Race Condition between DMA and SMMAMI · AptioV
High7.5
CVE-2024-2315
SMM arbitrary code execution in OverclockAMI · AptioV
Medium6.8
CVE-2024-33658
Buffer Overflow Vulnerability In OFBDAMI · AptioV
Medium4.4
CVE-2024-33660
Potential Firmware update without integrity checkAMI · AptioV
Medium5.2
CVE-2024-42442
Runtime Service Access outside SMRAMAMI · AptioV
High7.2
CVE-2024-33657
Smm Callout in SmmComputrace ModuleAMI · AptioV
High7.8
CVE-2024-33656
Memory Leak in SmmComuptrace ModuleAMI · AptioV
High7.8
CVE-2023-37297
heap memory overflowAMI · MegaRAC_SPx
High8.3
CVE-2023-37296
Stack-based Buffer OverflowAMI · MegaRAC_SPx
High8.3
CVE-2023-37295
Heap-based Buffer OverflowAMI · MegaRAC_SPx
High8.3
CVE-2023-37294
Heap-based Buffer OverflowAMI · MegaRAC_SPx
High8.3
CVE-2023-37293
stack-based buffer overflowAMI · MegaRAC_SPx
Critical9.6
CVE-2023-34333
Untrusted Pointer DereferenceAMI · MegaRAC_SPx
High7.8
CVE-2023-3043
Stack-based Buffer Overflow BMCAMI · MegaRAC_SPx
Critical9.6
CVE-2023-34332
Untrusted Pointer Dereference in BMCAMI · MegaRAC_SPx
High7.8
CVE-2023-39538
Failure when uploading a Logo image fileAMI · AptioV
High7.5
CVE-2023-39539
Failure when uploading a Logo image fileAMI · AptioV
High7.5
CVE-2023-39537
Improper input validation in BIOS TCG2AMI · AptioV
High7.5
CVE-2023-39536
Improper input validation in BIOS OFBDAMI · AptioV
High7.5
CVE-2023-39535
Improper input validation in BIOSAMI · AptioV
High7.5
CVE-2023-34470
Improper access controlAMI · AptioV
Medium6.8
CVE-2023-34469
Cold Rest VulnerabiltiyAMI · AptioV
Medium4.9
CVE-2023-34330
Code injection via Dynamic Redfish Extension interfaceAMI · MegaRAC_SPx12
High8.2
CVE-2023-34329
Authentication Bypass via HTTP Header SpoofingAMI · MegaRAC_SPx12
Critical9.1
CVE-2023-34473
Usage of Hard-coded CredentialsAMI · MegaRAC_SPx
Medium6.6
CVE-2023-34472
AMI SPx contains a vulnerability in the BMC where an Attacker may cause an improper neutralization of CRLF sequences in HTTP Headers. A successful exploit of…AMI · MegaRAC_SPx
Medium5.7
CVE-2023-34471
Missing Cryptographic StepAMI · MegaRAC_SPx
Medium6.3
CVE-2023-34338
hard coded cryptographic keyAMI · MegaRAC_SPx
High7.1
CVE-2023-34337
Inadequate Encryption StrengthAMI · MegaRAC_SPx
High7.6
CVE-2023-34336
AMI BMC contains a vulnerability in the IPMI handler, where an attacker with the required privileges can cause a buffer overflow, which may lead to code…AMI · MegaRAC_SPx
High8.1
CVE-2023-34335
AMI BMC contains a vulnerability in the IPMI handler, where an unauthenticated host is allowed to write to a host SPI flash, bypassing secure boot protections.…AMI · MegaRAC_SPx
High7.7