Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,965All CVEsplus 19,118 rejected
- 398Last 24 hours2,834 in the last 7 days
- 16,818Last 30 days1,549 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 1 | 21 | 0 | 0 | 22 | 58 |
| 2025 | 0 | 2 | 2 | 3 | 0 | 7 | 36 |
| 2024 | 1 | 2 | 1 | 0 | 0 | 4 | 29 |
| 2023 | 0 | 3 | 1 | 0 | 0 | 4 | 25 |
| 2022 | 0 | 4 | 1 | 0 | 0 | 5 | 21 |
| 2021 | 0 | 4 | 0 | 0 | 0 | 4 | 16 |
| 2020 | 0 | 0 | 3 | 0 | 0 | 3 | 12 |
| 2019 | 4 | 4 | 1 | 0 | 0 | 9 | 9 |
| Title | ||
|---|---|---|
| CVE-2026-76181 | Heap buffer overflow in dBASE index importThe Document Foundation · LibreOffice | Medium5.4 |
| CVE-2026-63270 | Environment/ini-file leaksThe Document Foundation · LibreOffice | Medium6.7 |
| CVE-2026-63269 | LFI and GET SSRF via GStreamer and HLS playlistsThe Document Foundation · LibreOffice | Medium6.7 |
| CVE-2026-63268 | LFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db hrefThe Document Foundation · LibreOffice | Medium6.7 |
| CVE-2026-63267 | LFI and GET SSRF via calcext:data-mappings and csv providerThe Document Foundation · LibreOffice | Medium6.7 |
| CVE-2026-63266 | Arbitrary file write via calcext:data-mappings, sql provider and Firebird backup functionalityThe Document Foundation · LibreOffice | Medium6.8 |
| CVE-2026-63277 | RCE via calcext:data-mappings, sql provider and jdbc connectorThe Document Foundation · LibreOffice | High8.5 |
| CVE-2026-63279 | Out of bounds read in PICT image importThe Document Foundation · LibreOffice | Medium5.4 |
| CVE-2026-63278 | Package URLs can be used to exfiltrate arbitrary INI file values and environment variablesThe Document Foundation · LibreOffice | Medium6.7 |
| CVE-2026-63276 | Stack buffer overflow in CFF to Type 1 font conversionThe Document Foundation · LibreOffice | Medium5.4 |
| CVE-2026-63275 | Stack buffer overflow in CFF font hint handlingThe Document Foundation · LibreOffice | Medium5.4 |
| CVE-2026-63274 | Heap buffer overflow in PDF import stream handlingThe Document Foundation · LibreOffice | Medium5.4 |
| CVE-2026-63273 | Heap buffer overflow in PDF import encryption handlingThe Document Foundation · LibreOffice | Medium5.4 |
| CVE-2026-63272 | Heap buffer overflow in WMF text record importThe Document Foundation · LibreOffice | Medium5.4 |
| CVE-2026-8358 | Heap buffer overflow in spreadsheet tracked-changes importThe Document Foundation · LibreOffice | Medium5.4 |
| CVE-2026-8357 | Heap buffer overflow in Calc formula compilationThe Document Foundation · LibreOffice | Medium5.4 |
| CVE-2026-8356 | Stack buffer overflow in PPT presentation importThe Document Foundation · LibreOffice | Medium5.4 |
| CVE-2026-6047 | Heap buffer overflow in OOXML text box element importThe Document Foundation · LibreOffice | Medium5.4 |
| CVE-2026-6045 | Heap buffer overflow in EMF+ gradient brush importThe Document Foundation · LibreOffice | Medium5.4 |
| CVE-2026-6040 | Heap use-after-free in ODF number-format blank-width parsingThe Document Foundation · LibreOffice | Medium5.4 |
| CVE-2026-6039 | Heap buffer overflow in DXF polyline importThe Document Foundation · LibreOffice | Medium5.4 |
| CVE-2026-4430 | Heap Buffer Overflow in AgileEngineThe Document Foundation · LibreOffice | Medium5.4 |
| CVE-2025-14714 | TCC Bypass via Inherited Permissions in Bundled InterpreterThe Document Foundation · LibreOffice | Low0.9 |
| CVE-2025-2866 | PDF signature forgery with adbe.pkcs7.sha1 SubFilterThe Document Foundation · LibreOffice | Low2.4 |
| CVE-2021-25635 | Content Manipulation with Certificate Validation AttackThe Document Foundation · LibreOffice | Medium5.2 |
| CVE-2025-1080 | Macro URL arbitrary script executionThe Document Foundation · LibreOffice | High7.2 |
| CVE-2025-0514 | Executable hyperlink Windows path targets executed unconditionally on activationThe Document Foundation · LibreOffice | High7.2 |
| CVE-2024-12426 | URL fetching can be used to exfiltrate arbitrary INI file values and environment variablesThe Document Foundation · LibreOffice | Medium6.7 |
| CVE-2024-12425 | Path traversal leading to arbitrary .ttf file writeThe Document Foundation · LibreOffice | Low2.4 |
| CVE-2024-7788 | Signatures in "repair mode" should not be trustedThe Document Foundation · LibreOffice | High7.8 |
| CVE-2024-6472 | Ability to trust not validated macro signatures removed in high security modeThe Document Foundation · LibreOffice | High7.8 |
| CVE-2024-5261 | TLS certificate are not properly verified when utilizing LibreOfficeKitThe Document Foundation · LibreOffice | Critical10.0 |
| CVE-2024-3044 | Graphic on-click binding allows unchecked script executionThe Document Foundation · LibreOffice | Medium6.5 |
| CVE-2023-6186 | Link targets allow arbitrary script executionThe Document Foundation · LibreOffice | High8.3 |
| CVE-2023-6185 | Improper input validation enabling arbitrary Gstreamer pipeline injectionThe Document Foundation · LibreOffice | High8.3 |
| CVE-2023-2255 | Remote documents loaded without prompt via IFrameThe Document Foundation · LibreOffice | Medium5.3 |
| CVE-2023-0950 | Array Index UnderFlow in Calc Formula ParsingThe Document Foundation · LibreOffice | High7.8 |
| CVE-2022-3140 | Macro URL arbitrary script executionThe Document Foundation · LibreOffice | Medium6.3 |
| CVE-2022-26307 | Weak Master KeysThe Document Foundation · LibreOffice | High8.8 |
| CVE-2022-26306 | Execution of Untrusted Macros Due to Improper Certificate ValidationThe Document Foundation · LibreOffice | High7.5 |
| CVE-2022-26305 | Execution of Untrusted Macros Due to Improper Certificate ValidationThe Document Foundation · LibreOffice | High7.5 |
| CVE-2021-25636 | Incorrect trust validation of signature with ambiguous KeyInfo childrenThe Document Foundation · LibreOffice | High7.5 |
| CVE-2021-25634 | Timestamp Manipulation with Signature WrappingThe Document Foundation · LibreOffice | High7.5 |
| CVE-2021-25633 | Content Manipulation with Double Certificate AttackThe Document Foundation · LibreOffice | High7.5 |
| CVE-2021-25631 | denylist of executable filename extensions possible to bypass under windowsThe Document Foundation · LibreOffice | High8.8 |
| CVE-2021-25630 | "loolforkit" is a privileged program that is supposed to be run by a special, non-privileged "lool" user. Before doing anything else "loolforkit" checks, if it…Collabora Productivity · Collabora Online | High7.8 |
| CVE-2020-12803 | XForms submissions could overwrite local filesThe Document Foundation · LibreOffice | Medium6.5 |
| CVE-2020-12802 | remote graphics contained in docx format retrieved in 'stealth mode'The Document Foundation · LibreOffice | Medium5.3 |
| CVE-2020-12801 | Crash-recovered MSOffice encrypted documents defaulted to not to using encryption on next saveThe Document Foundation · LibreOffice | Medium5.3 |
| CVE-2019-9853 | Insufficient URL decoding flaw in categorizing macro locationDocument Foundation · LibreOffice | High7.8 |