Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,850All CVEsplus 19,116 rejected
- 468Last 24 hours2,918 in the last 7 days
- 16,817Last 30 days1,547 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 2 | 8 | 0 | 0 | 10 | 74 |
| 2025 | 3 | 7 | 4 | 0 | 0 | 14 | 64 |
| 2024 | 1 | 8 | 13 | 0 | 0 | 22 | 50 |
| 2023 | 4 | 7 | 6 | 0 | 0 | 17 | 28 |
| 2022 | 2 | 2 | 6 | 1 | 0 | 11 | 11 |
| Title | ||
|---|---|---|
| CVE-2026-53564 | Arbitrary file read and writeCitrix · UniconOS | Medium5.1 |
| CVE-2026-53563 | Persistent Command ExecutionCitrix · UniconOS | Medium6.9 |
| CVE-2026-84420 | Out-of-Bounds Write and Out-of-Bounds ReadCitirx · Citrix Workspace app for Windows | Medium5.8 |
| CVE-2026-84419 | Out-of-Bounds WriteCitrix · Workspace app for Windows | Medium6.8 |
| CVE-2026-53562 | Local Privilege EscalationCitrix · UniconOS | High8.5 |
| CVE-2026-78546 | Out-of-Bounds ReadCitirx · Workspace app for Windows | Medium4.8 |
| CVE-2026-78547 | Out-of-Bounds WriteCitrix · Citrix Workspace app for Windows | Medium4.4 |
| CVE-2026-18751 | Citrix Workspace App for Mac Security Bulletin for CVE-2026-18751Citrix · WorkSpace App | Medium5.2 |
| CVE-2026-53566 | Out-of-bounds memory readCitrix · Citrix Secure Access Client for Windows | Medium6.8 |
| CVE-2026-53565 | Local Privilege escalation allows a low-privileged user to gain SYSTEM privilegesCitrix · Secure Access Client for Windows | High8.5 |
| CVE-2025-12101 | Cross-Site Scripting (XSS)NetScaler · ADC | Medium5.9 |
| CVE-2025-8424 | Improper access control on the NetScaler Management InterfaceNetScaler · ADC | High8.7 |
| CVE-2025-7776 | Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of ServiceNetScaler · ADC | High8.8 |
| CVE-2025-7775 | Memory overflow vulnerability leading to Remote Code Execution and/or Denial of ServiceExploitedNetScaler · ADC | Critical9.2 |
| CVE-2025-6759 | Local Privilege escalation allows a low-privileged user to gain SYSTEM privilegesCitrix · Windows Virtual Delivery Agent for CVAD and Citrix DaaS | High7.3 |
| CVE-2025-6543 | Memory overflow vulnerability leading to unintended control flow and Denial of ServiceExploitedNetScaler · ADC | Critical9.2 |
| CVE-2025-0320 | Citrix Secure Access - Local Privilege escalation allows a low-privileged user to gain SYSTEM privilegesCitrix · Secure Access Client for Windows | High8.6 |
| CVE-2025-4879 | Citrix Workspace App for Windows - Local Privilege escalation allows a low-privileged user to gain SYSTEM privilegesCitrix · Workspace App for Windows | High7.3 |
| CVE-2025-4365 | NetScaler Console and NetScaler SDX (SVM) - Arbitrary file readNetScaler · Console | Medium6.9 |
| CVE-2025-5349 | NetScaler ADC and NetScaler Gateway - Improper access control on the NetScaler Management InterfaceNetScaler · ADC | High8.7 |
| CVE-2025-5777 | NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overreadExploitedNetScaler · ADC | Critical9.3 |
| CVE-2025-1223 | An attacker can gain application privileges in order to perform limited modification and/or read arbitrary dataCitrix · Secure Access Client for Mac | Medium5.8 |
| CVE-2025-1222 | An attacker can gain application privileges in order to perform limited modification and/or read arbitrary dataCitrix · Secure Access Client for Mac | Medium5.8 |
| CVE-2024-12284 | Authenticated privilege escalationNetScaler · Console | High8.8 |
| CVE-2024-8535 | Authenticated user can access unintended user capabilitiesNetScaler · NetScaler ADC | Medium5.8 |
| CVE-2024-8534 | Memory safety vulnerability leading to memory corruption and Denial of ServiceNetSclaer · NetScaler ADC | High8.4 |
| CVE-2024-8069 | Limited remote code execution with privilege of a NetworkService Account accessExploitedCitrix Session Recording · Citrix Session Recording | Medium5.1 |
| CVE-2024-8068 | Privilege escalation to NetworkService Account accessExploitedCitrix · Citrix Session Recording | Medium5.1 |
| CVE-2024-7890 | Local privilege escalation allows a low-privileged user to gain SYSTEM privilegesCitrix · Citrix Workspace app for Windows | Medium5.4 |
| CVE-2024-7889 | Local privilege escalation allows a low-privileged user to gain SYSTEM privilegesCitrix · Citrix Workspace app for Windows | High7.0 |
| CVE-2024-6677 | Privilege escalation in uberAgentCitrix · uberAgent | High7.3 |
| CVE-2024-6149 | Redirection of users to a vulnerable URL in Citrix Workspace app for HTML5Citrix · Citrix Workspace app for HTML5 | Medium4.8 |
| CVE-2024-6148 | Bypass of GACS Policy Configuration settings in Citrix Workspace app for HTML5Citrix · Citrix Workspace app for HTML5 | Medium5.3 |
| CVE-2024-6150 | A non-admin user can cause short-term disruption in Target VM availability in Citrix ProvisioningCitrix · Citrix Provisioning | Medium4.8 |
| CVE-2024-6286 | Local Privilege escalation allows a low-privileged user to gain SYSTEM privilegesCitrix · Citrix Workspace app for Windows | High8.5 |
| CVE-2024-6151 | Local Privilege escalation allows a low-privileged user to gain SYSTEM privilegesCitrix · Windows Virtual Delivery Agent | High8.5 |
| CVE-2024-6236 | Denial of ServiceNetSclaer · NetScaler Console | High7.1 |
| CVE-2024-6235 | Sensitive information disclosureNetScaler · NetScaler Console | Critical9.4 |
| CVE-2024-5492 | Open redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary websitesNetSclaer · NetScaler ADC | Medium5.1 |
| CVE-2024-5491 | Denial of ServiceNetScaler · NetScaler ADC | High7.2 |
| CVE-2024-5661 | Potential Denial of Service affecting XenServer and Citrix HypervisorCitrix · Citrix Hypervisor | Medium6.0 |
| CVE-2024-2049 | Server-Side Request Forgery (SSRF)Citrix · Citrix SD-WAN Standard/Premium Editions | Medium6.5 |
| CVE-2023-6184 | Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross Site ScriptingCloud Software Group · Citrix Session Recording | Medium5.0 |
| CVE-2023-5914 | Cross-site scripting (XSS)Cloud Software Group · Citrix StoreFront | Medium5.4 |
| CVE-2023-6549 | Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of Service and…ExploitedCloud Software Group · NetScaler ADC | High8.2 |
| CVE-2023-6548 | Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with…ExploitedCloud Software Group · NetScaler ADC | Medium5.5 |
| CVE-2023-4967 | Denial of serviceCloud Software Group · NetScaler ADC | High8.2 |
| CVE-2023-4966 | Unauthenticated sensitive information disclosureExploitedCitrix · NetScaler ADC | Critical9.4 |
| CVE-2023-3467 | Privilege Escalation to root administrator (nsroot)Citrix · NetScaler ADC | High8.0 |
| CVE-2023-3466 | Reflected Cross-Site Scripting (XSS)Citrix · NetScaler ADC | High8.3 |