Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,324All CVEsplus 19,140 rejected
- 453Last 24 hours2,727 in the last 7 days
- 16,930Last 30 days1,561 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 30 | 15 | 5 | 0 | 51 | 141 |
| 2025 | 1 | 15 | 10 | 3 | 0 | 29 | 90 |
| 2024 | 1 | 8 | 14 | 2 | 0 | 25 | 61 |
| 2023 | 7 | 4 | 13 | 7 | 0 | 31 | 36 |
| 2022 | 1 | 1 | 3 | 0 | 0 | 5 | 5 |
| Title | ||
|---|---|---|
| CVE-2026-107359 | Malformed Wi-Fi Beacon Causes Crash on WF200Silicon Labs · WF200 FW | High7.1 |
| CVE-2026-89410 | Out-of-bounds read in Z-Wave NCP SPI HandlerSilicon Labs · Z-Wave SDK | Medium5.1 |
| CVE-2026-89409 | Unvalidated ZWAVE_CMD_NODES_EXIST May Cause Deletion of End NodesSilicon Labs · Z-Wave SDK | Medium5.3 |
| CVE-2026-85079 | Out-of-bounds write in Zigbee Simple_Desc_req handlingSilicon Labs · EmberZNet | High7.5 |
| CVE-2026-94502 | Out-of-bounds write in Zigbee Publish Price Matrix handlingSilicon Labs · EmberZNet | High7.5 |
| CVE-2026-66282 | Authenticated Denial-of-Service in Zigbee Publish Billing PeriodSilicon Labs · EmberZNet | Medium6.0 |
| CVE-2026-66281 | Authenticated Denial-of-Service in Zigbee Discover Attributes HandlingSilicon Labs · EmberZNet | Medium6.0 |
| CVE-2026-85080 | Authenticated Denial-of-Service in Zigbee GetGroupMembership HandlingSilicon Labs · EmberZNet | Medium6.0 |
| CVE-2026-66279 | Dis-connect vulnerability in Connect StackSilicon Labs · Connect SDK | High7.2 |
| CVE-2026-15419 | CP210x Driver Memory Corruption results in Arbitrary Code ExecutionSilicon Labs · silabser.sys driver | High7.0 |
| CVE-2026-15418 | CP210x Memory LeakageSilicon Labs · silabser.sys driver | Low2.4 |
| CVE-2026-15417 | CP210x Denial of ServiceSilicon Labs · silabser.sys driver | Medium6.9 |
| CVE-2026-16769 | RS9116W/SiWx917 plaintext pause encryption request causes DOSsilabs.com · WiseCnnect | High7.1 |
| CVE-2026-17610 | RAIL 802.15.4 Mux missing ACK can lead to DoSSilicon Labs · SiSDK | Medium6.0 |
| CVE-2026-5706 | Buffer overflow in Bluetooth Mesh SDK when handling extended advertisementsSilicon Labs · BT Mesh SDK | High8.9 |
| CVE-2026-65936 | RS9116W/SiWx917 malformed packet with increased length field causes memory leaksilabs.com · WiseConnect | Medium5.3 |
| CVE-2026-65935 | Bypassing passkey entry in legacy pairingsilabs.com · WiseConnect | High7.6 |
| CVE-2026-65934 | BT122 plaintext pause encryption request causes DOSsilabs.com · BT122 | High7.1 |
| CVE-2026-65933 | BT122 malformed packet with increased length field causes memory leaksilabs.com · BT122 | Medium5.3 |
| CVE-2026-65932 | BT122 stops advertisingsilabs.com · BT122 | Medium5.3 |
| CVE-2026-19293 | SMP security requestsilabs.com · WiseConnect | High8.8 |
| CVE-2026-19292 | Bluetooth re-pairing with legitimate device can use lower security levelsilabs.com · WiseConnect | High8.8 |
| CVE-2026-19291 | Bluetooth re-pairing can use a lower security level than previoussilabs.com · WiseConnect | High8.8 |
| CVE-2026-16101 | forced re-pairing with already bonded devicesilabs.com · WiseConnect | High8.8 |
| CVE-2026-6924 | Weak entropy initialization in Silicon Labs Matter SiWx917 TinyCrypt pathSilicon Labs · Silicon Labs Matter Github | High8.7 |
| CVE-2026-4930 | DPA Countermeasures weakening on Series 3 devicessilabs.com · Simplicity SDK | High7.1 |
| CVE-2026-6432 | Improper bounds validation in EmberZNet SDKSilicon Labs · EmberZNet | Medium5.3 |
| CVE-2026-47154 | Simple Metering GetProfileResponse interval-bounds bug in EmberZNet v9.0.2Silicon Labs · EmberZNet | High7.1 |
| CVE-2026-47153 | Level Control Step With On/Off divide-by-zero in EmberZNet v9.0.2Silicon Labs · EmberZNet | High7.1 |
| CVE-2026-47152 | Level Control Move divide-by-zero in EmberZNet v9.0.2Silicon Labs · EmberZNet | High7.1 |
| CVE-2026-47151 | Door Lock ClearWeekdaySchedule invalid table index and write in EmberZNet v9.0.2Silicon Labs · EmberZNet | High7.1 |
| CVE-2026-47150 | IAS Zone enroll invalid table index and write in EmberZNet 9.0.2Silicon Labs · EmberZNet | High7.1 |
| CVE-2026-47149 | Door Lock GetUserType invalid table index in EmberZNet v9.0.2Silicon Labs · EmberZNet | High7.1 |
| CVE-2026-47148 | Groups GetGroupMembership count/list-length mismatch in EmberZNet v9.0.2Silicon Labs · EmberZNet | High7.1 |
| CVE-2026-47147 | OTA server raw parser missing per-field bounds validation in EmberZNet v9.0.2Silicon Labs · EmberZNet | High7.1 |
| CVE-2026-47146 | Color Control color-temperature assertion abort in EmberZNet v9.0.2Silicon Labs · EmberZNet | High7.1 |
| CVE-2026-47145 | Color Control hue/saturation assertion abort in EmberZNet v9.0.2Silicon Labs · EmberZNet | High7.1 |
| CVE-2026-4526 | Global ZCL command parser missing minimum-length validation in EmberZNet v9.0.2Silicon Labs · EmberZNet | High7.1 |
| CVE-2026-2815 | Incorrect use of the PUF key for user key generation in EFR32xG27 results in predictable keysSilicon Labs · SiSDK | High8.4 |
| CVE-2026-8676 | An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and creating a new bond.silabs.com · Simplicity SDK | High8.8 |
| CVE-2025-14972 | Insufficient DPA countermeasure reseedingsilabs.com · Simplicity SDK | Medium4.1 |
| CVE-2026-3290 | Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable valuesSilicon Labs · RS9116 SDK | High7.4 |
| CVE-2025-11571 | Command Execution vulnerability in Simplicity Installersilabs.com · Simplicity Studio v5 | Low2.1 |
| CVE-2025-14055 | Integer underflow in Secure NCP hostsilabs.com · Simplicity SDK, Gecko SDK | Low2.4 |
| CVE-2025-14547 | ECJ-PAKE Integer Underflow Vulnerability in Silicon Labs PSA Crypto and SE Manager APIssilabs.com · Simplicity SDK | Low2.3 |
| CVE-2026-0619 | Integer Wraparound DoS in Silicon Labs Matter Implementationsilabs.com · Silicon Labs Matter | Medium6.0 |
| CVE-2025-11004 | Reflected XSS vulnerability in Simplicity Device Manager toolsilabs.com · Simplicity Device Manager | High7.5 |
| CVE-2025-7432 | DPA countermeasures not reseeded under certain conditionssilabs.com · Simplicity SDK | Low1.0 |
| CVE-2025-12131 | Truncated 802.15.4 packet leads to denial of servicesilabs.com · EmberZNet SDK | Medium5.3 |
| CVE-2025-7964 | Zigbee Router Denial of Servicesilabs.com · Silicon Labs Zigbee Stack | Critical9.2 |