Skip to content
CVE Tracker

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 399,982All CVEsplus 18,869 rejected
  • 683Last 24 hours3,262 in the last 7 days
  • 17,348Last 30 days1,523 of them critical
  • 1,766Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
20265493,0111,62333,0688,25418,215
20251592,0592,55548975,6749,961
20241551,8162,2813504,2874,287

Latest CVEs

18,215 CVEs, newest first

CVEs, newest first
Title
CVE-2026-99270
tcp: Fix potential UAF in reqsk_timer_handler().Linux · Linux
High8.1
CVE-2026-99269
sched_ext: Wait for SCX_OPSS_DISPATCHING before moving tasks off DSQsLinux · Linux
High7.8
CVE-2026-99268
io_uring: wake ring pollers for local task_workLinux · Linux
Not scored
CVE-2026-99267
io_uring/napi: make stale entries time out after 60sLinux · Linux
Not scored
CVE-2026-99266
io_uring/zcrx: fix buffer offsets in areas above 4GBLinux · Linux
Not scored
CVE-2026-99265
io_uring/openclose: keep the lock in io_pipe_fixed()Linux · Linux
Not scored
CVE-2026-99264
io_uring/net: don't retry recv on uncommitted buffersLinux · Linux
High7.8
CVE-2026-99263
io_uring/poll: avoid retry wakeup loss when dropping ownershipLinux · Linux
Not scored
CVE-2026-99262
io_uring/timeout: don't lose a cancel as io-wq arms a timeoutLinux · Linux
Not scored
CVE-2026-99261
drm/amdgpu: correct reservation fence slots for userq per-vm BOs evictionLinux · Linux
Not scored
CVE-2026-99260
ntfs: fix resident conversion in ntfs_new_attr_flagsLinux · Linux
Not scored
CVE-2026-99259
soc/tegra: pmc: Fix uninitialised clock rateLinux · Linux
Not scored
CVE-2026-99258
x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index()Linux · Linux
Not scored
CVE-2026-99257
gpio: shared: gracefully handle no-device lookup of shared GPIOsLinux · Linux
Not scored
CVE-2026-99256
dm cache: fix issue with background work lockingLinux · Linux
Not scored
CVE-2026-99255
io_uring/io-wq: don't hide a link from cancellationsLinux · Linux
Not scored
CVE-2026-99254
io_uring: don't flood a cancelling task with task_workLinux · Linux
Not scored
CVE-2026-99253
io_uring/cancel: rearm local work wake up before sleepLinux · Linux
Not scored
CVE-2026-99252
io_uring/mpscq: disable preemption while pushingLinux · Linux
Not scored
CVE-2026-99251
Drivers: hv: Avoid infinite retry loop in init_vp_index()Linux · Linux
Not scored
CVE-2026-99250
printk: Postpone kthread startupLinux · Linux
Not scored
CVE-2026-99249
pid_namespace: make zap_pid_ns_processes() freezableLinux · Linux
Not scored
CVE-2026-99248
i2c: xiic: restore non-managed runtime PM to fix clk WARN floodLinux · Linux
Not scored
CVE-2026-99247
tracing: Do not initialize tracefs work if tracing is disabledLinux · Linux
Not scored
CVE-2026-99246
tipc: protect node reset trace dump with node lockLinux · Linux
High8.1
CVE-2026-99245
KEYS: Fix key_reject_and_link() race with keyring restrictionLinux · Linux
Not scored
CVE-2026-99244
pid_namespace: prevent TIF_NOTIFY_SIGNAL from interrupting the reaperLinux · Linux
Not scored
CVE-2026-99243
io-wq: order the exit bit against worker creation task workLinux · Linux
Not scored
CVE-2026-99242
ntfs: fix race between fallocate and mmap readsLinux · Linux
Not scored
CVE-2026-99241
ntfs: take invalidate_lock in ntfs_filemap_page_mkwrite()Linux · Linux
Not scored
CVE-2026-99240
mm/damon/core: error damos_commit_quota_goal() for zero target_valueLinux · Linux
Not scored
CVE-2026-99239
Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has connLinux · Linux
High7.8
CVE-2026-99238
tracing: Hold trace_types_lock when updating modules in persistent instancesLinux · Linux
High7.8
CVE-2026-99237
tracing: Hold trace_types_lock when resetting last boot data from readersLinux · Linux
High7.8
CVE-2026-99236
tracing: Reject incomplete event filter expressionsLinux · Linux
High7.8
CVE-2026-99235
tracing: Save the event file instead of the compatible histogramLinux · Linux
High7.8
CVE-2026-99234
tracing: Unregister field variable histograms when the command failsLinux · Linux
Not scored
CVE-2026-99233
tracing/histograms: Verify event_call identity when updating synth_event refcountLinux · Linux
High7.8
CVE-2026-99232
tracing/syscalls: Use copy_from_user for the faultable syscall bufferLinux · Linux
Not scored
CVE-2026-99231
io_uring/waitid: own the request before clearing ->headLinux · Linux
High7.8
CVE-2026-99230
io_uring/cmd: don't leave list poison in ->hash_nodeLinux · Linux
Not scored
CVE-2026-99229
io_uring/wait: don't spin on a stuck overflow listLinux · Linux
Not scored
CVE-2026-99228
io_uring/io-wq: don't lose the signal that ends workLinux · Linux
Not scored
CVE-2026-99227
io_uring/waitid: prevent cancel reference wrapLinux · Linux
High7.8
CVE-2026-99226
keys: Avoid the owner account dereference in named keyring lookupLinux · Linux
Not scored
CVE-2026-99225
keys: Check the authorization payload in process keyring searchesLinux · Linux
Not scored
CVE-2026-99224
keys: Protect the type name while describing a keyLinux · Linux
High7.0
CVE-2026-99223
keys: make keyring indexes independent of kernel addressesLinux · Linux
Not scored
CVE-2026-99222
keys: Protect the read method check against type removalLinux · Linux
Not scored
CVE-2026-99221
keys/trusted_keys: return immediately after TPM unseal failureLinux · Linux
Not scored