Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read just now.
At a glance
Published CVEs; rejected ones are not counted.
- 400,732All CVEsplus 19,114 rejected
- 440Last 24 hours2,861 in the last 7 days
- 17,141Last 30 days1,582 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per month
In the last 12 months, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| Nov 2026 | 0 | 13 | 0 | 0 | 31 | 44 | 18,202 |
| Oct 2026 | 13 | 172 | 0 | 0 | 866 | 1,051 | 18,158 |
| Sept 2026 | 110 | 644 | 64 | 0 | 1,289 | 2,107 | 17,107 |
| Aug 2026 | 212 | 740 | 0 | 0 | 691 | 1,643 | 15,000 |
| Jul 2026 | 88 | 423 | 240 | 0 | 84 | 835 | 13,357 |
| Jun 2026 | 40 | 239 | 234 | 0 | 0 | 513 | 12,522 |
| May 2026 | 43 | 403 | 580 | 1 | 0 | 1,027 | 12,009 |
| Apr 2026 | 29 | 166 | 182 | 0 | 0 | 377 | 10,982 |
| Mar 2026 | 1 | 64 | 113 | 0 | 0 | 178 | 10,605 |
| Feb 2026 | 1 | 61 | 123 | 0 | 35 | 220 | 10,427 |
| Jan 2026 | 12 | 84 | 87 | 2 | 61 | 246 | 10,207 |
| Dec 2025 | 37 | 292 | 8 | 0 | 717 | 1,054 | 9,961 |
| Nov 2025 | 2 | 42 | 1 | 0 | 58 | 103 | 8,907 |
| Title | ||
|---|---|---|
| CVE-2026-99270 | tcp: Fix potential UAF in reqsk_timer_handler().Linux · Linux | High8.1 |
| CVE-2026-99269 | sched_ext: Wait for SCX_OPSS_DISPATCHING before moving tasks off DSQsLinux · Linux | High7.8 |
| CVE-2026-99261 | drm/amdgpu: correct reservation fence slots for userq per-vm BOs evictionLinux · Linux | Not scored |
| CVE-2026-99260 | ntfs: fix resident conversion in ntfs_new_attr_flagsLinux · Linux | Not scored |
| CVE-2026-99259 | soc/tegra: pmc: Fix uninitialised clock rateLinux · Linux | Not scored |
| CVE-2026-99258 | x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index()Linux · Linux | Not scored |
| CVE-2026-99257 | gpio: shared: gracefully handle no-device lookup of shared GPIOsLinux · Linux | Not scored |
| CVE-2026-99256 | dm cache: fix issue with background work lockingLinux · Linux | Not scored |
| CVE-2026-99255 | io_uring/io-wq: don't hide a link from cancellationsLinux · Linux | Not scored |
| CVE-2026-99254 | io_uring: don't flood a cancelling task with task_workLinux · Linux | Not scored |
| CVE-2026-99253 | io_uring/cancel: rearm local work wake up before sleepLinux · Linux | Not scored |
| CVE-2026-99251 | Drivers: hv: Avoid infinite retry loop in init_vp_index()Linux · Linux | Not scored |
| CVE-2026-99250 | printk: Postpone kthread startupLinux · Linux | Not scored |
| CVE-2026-99249 | pid_namespace: make zap_pid_ns_processes() freezableLinux · Linux | Not scored |
| CVE-2026-99248 | i2c: xiic: restore non-managed runtime PM to fix clk WARN floodLinux · Linux | Not scored |
| CVE-2026-99247 | tracing: Do not initialize tracefs work if tracing is disabledLinux · Linux | Not scored |
| CVE-2026-99246 | tipc: protect node reset trace dump with node lockLinux · Linux | High8.1 |
| CVE-2026-99245 | KEYS: Fix key_reject_and_link() race with keyring restrictionLinux · Linux | Not scored |
| CVE-2026-99244 | pid_namespace: prevent TIF_NOTIFY_SIGNAL from interrupting the reaperLinux · Linux | Not scored |
| CVE-2026-99242 | ntfs: fix race between fallocate and mmap readsLinux · Linux | Not scored |
| CVE-2026-99241 | ntfs: take invalidate_lock in ntfs_filemap_page_mkwrite()Linux · Linux | Not scored |
| CVE-2026-99240 | mm/damon/core: error damos_commit_quota_goal() for zero target_valueLinux · Linux | Not scored |
| CVE-2026-99239 | Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has connLinux · Linux | High7.8 |
| CVE-2026-99238 | tracing: Hold trace_types_lock when updating modules in persistent instancesLinux · Linux | High7.8 |
| CVE-2026-99237 | tracing: Hold trace_types_lock when resetting last boot data from readersLinux · Linux | High7.8 |
| CVE-2026-99236 | tracing: Reject incomplete event filter expressionsLinux · Linux | High7.8 |
| CVE-2026-99235 | tracing: Save the event file instead of the compatible histogramLinux · Linux | High7.8 |
| CVE-2026-99234 | tracing: Unregister field variable histograms when the command failsLinux · Linux | Not scored |
| CVE-2026-99233 | tracing/histograms: Verify event_call identity when updating synth_event refcountLinux · Linux | High7.8 |
| CVE-2026-99232 | tracing/syscalls: Use copy_from_user for the faultable syscall bufferLinux · Linux | Not scored |
| CVE-2026-99231 | io_uring/waitid: own the request before clearing ->headLinux · Linux | High7.8 |
| CVE-2026-99230 | io_uring/cmd: don't leave list poison in ->hash_nodeLinux · Linux | Not scored |
| CVE-2026-99229 | io_uring/wait: don't spin on a stuck overflow listLinux · Linux | Not scored |
| CVE-2026-99228 | io_uring/io-wq: don't lose the signal that ends workLinux · Linux | Not scored |
| CVE-2026-99227 | io_uring/waitid: prevent cancel reference wrapLinux · Linux | High7.8 |
| CVE-2026-99226 | keys: Avoid the owner account dereference in named keyring lookupLinux · Linux | Not scored |
| CVE-2026-99225 | keys: Check the authorization payload in process keyring searchesLinux · Linux | Not scored |
| CVE-2026-99224 | keys: Protect the type name while describing a keyLinux · Linux | High7.0 |
| CVE-2026-99223 | keys: make keyring indexes independent of kernel addressesLinux · Linux | Not scored |
| CVE-2026-99222 | keys: Protect the read method check against type removalLinux · Linux | Not scored |
| CVE-2026-99221 | keys/trusted_keys: return immediately after TPM unseal failureLinux · Linux | Not scored |
| CVE-2026-99220 | asymmetric_keys: reject trust keys without IDsLinux · Linux | Not scored |
| CVE-2026-99219 | ftrace: Initialize modname and offset in print_rec()Linux · Linux | Not scored |
| CVE-2026-99218 | coredump: hold RCU while releasing parked threadsLinux · Linux | High7.0 |
| CVE-2026-99216 | Drivers: hv: Don't reset VMBus connection state on error/exit pathsLinux · Linux | High8.4 |
| CVE-2026-99215 | power: supply: core: prevent unregistering a power supply while a callback runsLinux · Linux | Not scored |
| CVE-2026-99214 | drm/vc4: hdmi: Move packet RAM enable to PM runtimeLinux · Linux | Not scored |
| CVE-2026-99213 | vsock: treat TCP_CLOSING as once-establishedLinux · Linux | High7.8 |
| CVE-2026-99212 | net/rds: don't let the rdma_cm destroy an id RDS still owns on route failureLinux · Linux | High7.0 |
| CVE-2026-99211 | netlink: reset skb headers before unicast and multicast filteringLinux · Linux | Not scored |