Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,298All CVEsplus 19,140 rejected
- 453Last 24 hours2,723 in the last 7 days
- 16,916Last 30 days1,557 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 30 | 24 | 25 | 2 | 0 | 81 | 124 |
| 2025 | 13 | 5 | 6 | 1 | 0 | 25 | 43 |
| 2024 | 0 | 2 | 0 | 0 | 0 | 2 | 18 |
| 2023 | 1 | 1 | 0 | 0 | 0 | 2 | 16 |
| 2022 | 7 | 2 | 2 | 0 | 0 | 11 | 14 |
| 2021 | 3 | 0 | 0 | 0 | 0 | 3 | 3 |
| Title | ||
|---|---|---|
| CVE-2026-4756 | Out-of-bounds Write in MolotovCherry Android-ImageMagick7MolotovCherry · Android-ImageMagick7 | High7.8 |
| CVE-2026-4755 | CWE-20 in MolotovCherry Android-ImageMagick7MolotovCherry · Android-ImageMagick7 | Critical9.8 |
| CVE-2026-4754 | CWE-79 in MolotovCherry Android-ImageMagick7MolotovCherry · Android-ImageMagick7 | Medium6.1 |
| CVE-2026-33852 | Missing Release of Memory after Effective Lifetime in MolotovCherry Android-ImageMagick7MolotovCherry · Android-ImageMagick7 | High7.5 |
| CVE-2026-33856 | Missing Release of Memory after Effective Lifetime in MolotovCherry Android-ImageMagick7MolotovCherry · Android-ImageMagick7 | High7.5 |
| CVE-2026-33855 | Integer Overflow or Wraparound in MolotovCherry Android-ImageMagick7MolotovCherry · Android-ImageMagick7 | Medium5.5 |
| CVE-2026-33854 | Out-of-bounds Write in MolotovCherry Android-ImageMagick7MolotovCherry · Android-ImageMagick7 | High8.8 |
| CVE-2026-33853 | NULL Pointer Dereference in MolotovCherry Android-ImageMagick7MolotovCherry · Android-ImageMagick7 | Medium5.5 |
| CVE-2026-33847 | Improper Restriction of Operations within the Bounds of a Memory Buffer in linkingvision rapidvmslinkingvision · rapidvms | High7.8 |
| CVE-2026-33849 | Improper Restriction of Operations within the Bounds of a Memory Buffer in linkingvision rapidvmslinkingvision · rapidvms | High8.8 |
| CVE-2026-33848 | Improper Restriction of Operations within the Bounds of a Memory Buffer in linkingvision rapidvmslinkingvision · rapidvms | High8.8 |
| CVE-2026-33851 | Improper Restriction of Operations within the Bounds of a Memory Buffer in joncampbell123 doslibjoncampbell123 · doslib | High7.8 |
| CVE-2026-33850 | Out-of-bounds Write in WujekFoliarz DualSenseY-v2WujekFoliarz · DualSenseY-v2 | High7.8 |
| CVE-2026-4753 | Out-of-bounds Read in slajerek RetroDebuggerslajerek · RetroDebugger | Critical9.1 |
| CVE-2026-4752 | Use After Free in No-Chicken Echo-MateNo-Chicken · Echo-Mate | Medium6.4 |
| CVE-2026-4751 | NULL Pointer Dereference in tmate-io tmatetmate-io · tmate | Medium5.3 |
| CVE-2026-4750 | Out-of-bounds Read in fabiangreffrath wooffabiangreffrath · woof | Critical9.1 |
| CVE-2026-4749 | NVD-CWE-noinfo in albfan miraclecastalbfan · miraclecast | Medium6.5 |
| CVE-2026-4746 | Heap Buffer Over-Write Vulenrabilty in timeplus-io/protontimeplus-io · proton | Critical10.0 |
| CVE-2026-4745 | Arbitrary Code Execution via Crafted Bytecode in dendibakh/perf-ninjadendibakh · perf-ninja | Critical10.0 |
| CVE-2026-4744 | Notepad3 Bundled Oniguruma compile_string_node() Heap Buffer Overflow via Crafted Regex Pattern Allows Arbitrary Code Executionrizonesoft · Notepad3 | Critical9.3 |
| CVE-2026-4743 | Null-Pointer Dereference Vulnerability in taurusxin/ncmdumptaurusxin · ncmdump | Medium5.2 |
| CVE-2026-4742 | HTTP Request Smuggling in visualfc/liteidevisualfc · liteide | Low2.9 |
| CVE-2026-4741 | Path Traversal Vulnerability in TeamJCD/JoyConDroidTeamJCD · JoyConDroid | High8.6 |
| CVE-2026-4739 | Integer overflow vulnerabilities in InsightSoftwareConsortium/ITKInsightSoftwareConsortium · ITK | Critical9.4 |
| CVE-2026-4738 | GDAL Bundled zlib (inftree9.c) Pointer Offset Optimization Undefined Behavior Allows Heap Corruption or Remote Code ExecutionOSGeo · gdal | Critical9.4 |
| CVE-2026-4737 | Use-After-Free Vulnerability in No-Chicken/Echo-MateNo-Chicken · Echo-Mate | High7.3 |
| CVE-2026-4736 | Math Issue in No-Chicken/Echo-MateNo-Chicken · Echo-Mate | High7.3 |
| CVE-2026-4735 | A stack overflow and DoS vulnerability in DTStack/chunjunDTStack · chunjun | High8.7 |
| CVE-2026-4734 | Heap Buffer Overflow in yoyofr/modizeryoyofr · modizer | Critical9.4 |
| CVE-2026-4733 | Information disclosure in ixray-1.6-stcopixray-team · ixray-1.6-stcop | Medium5.3 |
| CVE-2026-4732 | Out-of-bounds Read Overflow in tildearrow/furnacetildearrow · furnace | High8.4 |
| CVE-2026-4731 | An Integer Overflow Vulnerability in artraweditor/ARTartraweditor · ART | High8.5 |
| CVE-2026-24875 | Integer overflow in modizeryoyofr · modizer | High7.8 |
| CVE-2026-24874 | Type confusion in xray-monoliththemrdemonized · xray-monolith | Critical9.1 |
| CVE-2026-24873 | Out-of-bounds read in lpp-vitaRinnegatamante · lpp-vita | High7.8 |
| CVE-2026-24872 | Pointer arithmetic error in SkyFire_548ProjectSkyfire · SkyFire_548 | Critical9.8 |
| CVE-2026-24871 | Code injection in Minecraft-Rcon-Managepilgrimage233 · Minecraft-Rcon-Manage | Critical10.0 |
| CVE-2026-24870 | Information disclosure in ixray-1.6-stcopixray-team · ixray-1.6-stcop | Low3.7 |
| CVE-2026-24832 | Out-of-bounds write in ixray-1.6-stcopixray-team · ixray-1.6-stcop | Critical9.8 |
| CVE-2026-24831 | Infinite loop (DoS) in ixray-1.6-stcopixray-team · ixray-1.6-stcop | High7.5 |
| CVE-2026-24830 | Integer Overflow or Wraparound in IronOSRalim · IronOS | Critical9.8 |
| CVE-2026-24829 | Out-of-bounds write in is-EngineIs-Daouda · is-Engine | Medium6.5 |
| CVE-2026-24828 | Memory leak in is-EngineIs-Daouda · is-Engine | High7.5 |
| CVE-2026-24827 | Out-of-bounds write in Commander-Geniusgerstrong · Commander-Genius | High7.5 |
| CVE-2026-24826 | Out-of-bounds write in turso3dcadaver · turso3d | Critical10.0 |
| CVE-2026-24825 | a memory leak in ydb-platform/ydb with use of yajl_tree_parse function from src/yail module, which will cause out-of-memory in server and cause crash.ydb-platform · ydb | Medium6.9 |
| CVE-2026-24824 | A XSS in yacy/yacy_search_serveryacy · yacy_search_server | Medium6.9 |
| CVE-2026-24823 | A heap-based buffer over-read or buffer overflow vulnerability in FASTSHIFT/X-TRACKFASTSHIFT · X-TRACK | Critical10.0 |
| CVE-2026-24822 | a heap-based buffer overflow vulnerability in ttttupup/wxhelper via src/mongoose.ttttupup · wxhelper | Critical10.0 |