Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,943All CVEsplus 19,118 rejected
- 383Last 24 hours2,817 in the last 7 days
- 16,800Last 30 days1,547 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 8 | 3 | 1 | 0 | 12 | 23 |
| 2025 | 0 | 9 | 2 | 0 | 0 | 11 | 11 |
| Title | ||
|---|---|---|
| CVE-2026-12855 | H19WMIHandlerSmm: unvalidated memory boundary could result in arbitrary code execution.Insyde Software · InsydeH2O | High8.2 |
| CVE-2026-6485 | UEFI BIOS embedded Shell can be used to bypass Secure BootInsyde Software · InsydeH2O | High8.2 |
| CVE-2021-38489 | HDD Password Stored In PlaintextInsyde Software · InsydeH2O | High8.2 |
| CVE-2021-43614 | VariableEditSmm: Error checking of UEFI variables could cause buffer overflow, leading to code executionInsyde Software · InsydeH2O | Medium6.7 |
| CVE-2021-43613 | SysPasswordDxe: Password hashes are exposed in runtime UEFI variables, leading to escalation of privilegeInsyde Software · InsydeH2O | Medium6.5 |
| CVE-2026-9805 | FMTSWriteUseIntelLib: FMTS SMM IHISI Buffer OverflowInsyde Software · InsydeH2O | Low2.7 |
| CVE-2026-8810 | HDD Password leakage vulnerabilityInsyde Software · InsydeH2O, InsydeH2O ARM | Medium6.9 |
| CVE-2026-6484 | Lack of verified boot to certain FV may cause arbitrary code executionInsyde Software · InsydeH2O | High8.2 |
| CVE-2025-12053 | egwindrvx64.sys is potentially vulnerable to a buffer overflowInsyde Software · InsydeH2O tools | High7.8 |
| CVE-2025-12052 | egwindrv.sys is potentially vulnerable to a buffer overflow.Insyde Software · InsydeH2O tools | High7.8 |
| CVE-2025-12051 | H2OFFT64.sys is potentially vulnerable to a buffer overflow.Insyde Software · InsydeH2O tools | High7.8 |
| CVE-2025-12050 | In H2OFFT32.sys is potentially vulnerable to a buffer overflow.Insyde Software · InsydeH2O tools | High7.8 |
| CVE-2025-10451 | H19Int15CallbackSmm: SMM memory corruption vulnerability in combined DXE/SMM (SMRAM write)Insyde Software · InsydeH2O | High8.2 |
| CVE-2025-4410 | SetupUtility: A buffer overflow vulnerability leads to arbitrary code execution.Insyde Software · InsydeH2O | High7.5 |
| CVE-2025-4277 | Tcg2Smm: improper input validation may lead to arbitrary code executionInsyde Software · InsydeH2O | High7.5 |
| CVE-2025-4276 | UsbCoreDxe: improper input validation may lead to arbitrary code executionInsyde Software · InsydeH2O | High7.5 |
| CVE-2025-4426 | SetupAutomationSmm : SMRAM memory contents leak / information disclosure vulnerability in SMM moduleInsyde Software · InsydeH2O | Medium6.0 |
| CVE-2025-4425 | SetupAutomationSmm: Stack overflow vulnerability in SMI handlerInsyde Software · InsydeH2O | High8.2 |
| CVE-2025-4424 | SetupAutomationSmm : Arbitrary calls to SmmSetVariable with unsanitised arguments in SMI handlerInsyde Software · InsydeH2O | Medium6.0 |
| CVE-2025-4423 | SetupAutomationSmm:Vulnerability in the SMM module allow attacker to write arbitrary code and lead to memory corruptionInsyde Software · InsydeH2O | High8.2 |
| CVE-2025-4422 | EfiSmiServices : EfiPcdProtocol, SMM memory corruption vulnerabilities in SMM moduleInsyde Software · InsydeH2O | High8.2 |
| CVE-2025-4421 | EfiSmiServices: gEfiSmmCpuProtocol, SMM memory corruption vulnerabilities in SMM moduleInsyde Software · InsydeH2O | High8.2 |
| CVE-2025-4275 | SecureFlashDxe: Incorrect UEFI variable attributes check allows usage of invalid certificateInsyde Software · InsydeH2O | High7.8 |