Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read just now.
At a glance
Published CVEs; rejected ones are not counted.
- 400,565All CVEsplus 18,890 rejected
- 372Last 24 hours3,004 in the last 7 days
- 17,096Last 30 days1,578 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 12 | 20 | 19 | 1 | 0 | 52 | 176 |
| 2025 | 3 | 6 | 1 | 1 | 0 | 11 | 124 |
| 2024 | 0 | 9 | 12 | 2 | 0 | 23 | 113 |
| 2023 | 0 | 5 | 3 | 1 | 0 | 9 | 90 |
| 2022 | 0 | 22 | 34 | 1 | 0 | 57 | 81 |
| 2021 | 0 | 13 | 11 | 0 | 0 | 24 | 24 |
| Title | ||
|---|---|---|
| CVE-2026-102704 | arbitrary read/write via grant copyXen · Xen | Medium4.4 |
| CVE-2026-102703 | arbitrary read/write via grant copyXen · Xen | Medium4.4 |
| CVE-2026-102700 | gnttab: cache-flush handling may cause page reference leakXen · Xen | Medium4.7 |
| CVE-2026-102702 | Arm: multiple issues with GNTTABOP_cache_flushXen · Xen | High7.5 |
| CVE-2026-102699 | Arm: multiple issues with GNTTABOP_cache_flushXen · Xen | High7.5 |
| CVE-2026-79611 | VMX: VMentry failure with branch tracing and blocked statesXen · Xen | Medium5.5 |
| CVE-2026-79610 | grant-table: double version change raceXen · Xen | High8.8 |
| CVE-2026-79609 | x86: XPTI may break on huge-memory systemsXen · Xen | High8.8 |
| CVE-2026-79608 | x86/AMD: ineffectual Zenbleed workaroundXen · Xen | Critical9.8 |
| CVE-2026-79607 | Xenstore: Guests can crash xenstored during Live UpdateXen · Xen | Medium5.5 |
| CVE-2026-79603 | Unconditionally do TLB flushing ahead of page scrubbingXen · Xen | Medium4.3 |
| CVE-2026-79602 | x86: improper handling of HVM emulation return codesXen · Xen | High8.8 |
| CVE-2026-62437 | x86: DMs may cause mem leak by IRQ bindingXen · Xen | Medium6.5 |
| CVE-2026-62434 | PoD: Don't try to reclaim special pagesXen · Xen | Medium5.3 |
| CVE-2026-62433 | correct buffer checks for DM_OP hypercallsXen · Xen | High7.3 |
| CVE-2026-62432 | evtchn: Race between FIFO expand and resetXen · Xen | High7.3 |
| CVE-2026-62431 | Viridian STIMER division by zeroXen · Xen | High7.5 |
| CVE-2026-62430 | x86: Out-of-bounds read in vRTC emulationXen · Xen | High7.5 |
| CVE-2026-62429 | vNUMA domain cleanup may race other operationsXen · Xen | Medium6.5 |
| CVE-2026-62436 | grant-table: version change racing with other operationsXen · Xen | Medium6.5 |
| CVE-2026-62435 | grant-table: version change racing with other operationsXen · Xen | Medium6.5 |
| CVE-2026-62428 | grant-table: type confusion in grant-copyXen · Xen | High7.8 |
| CVE-2026-62427 | sysctl and platform-op locks open to abuseXen · Xen | High8.8 |
| CVE-2026-62426 | sysctl and platform-op locks open to abuseXen · Xen | High8.8 |
| CVE-2026-62425 | buffer overruns in libfsimage iso9660 handlingXen · Xen | Medium5.5 |
| CVE-2026-62424 | buffer overruns in libfsimage iso9660 handlingXen · Xen | Medium5.5 |
| CVE-2026-62423 | buffer overruns in libfsimage iso9660 handlingXen · Xen | Medium5.5 |
| CVE-2026-42495 | buffer overruns in libfsimage iso9660 handlingXen · Xen | Medium5.5 |
| CVE-2026-42494 | buffer overruns in libfsimage iso9660 handlingXen · Xen | Medium6.1 |
| CVE-2026-42492 | vIRQ event channel binding may break XenstoreXen · Xen | High7.5 |
| CVE-2026-42493 | x86 shadow paging is deprecatedXen · Xen | High7.5 |
| CVE-2026-42486 | Multiple RBAC issues in XAPIXen · XAPI | Critical9.4 |
| CVE-2026-23562 | Multiple RBAC issues in XAPIXen · XAPI | Critical9.4 |
| CVE-2026-23561 | Multiple RBAC issues in XAPIXen · XAPI | Critical9.4 |
| CVE-2026-23560 | Multiple RBAC issues in XAPIXen · XAPI | Critical9.4 |
| CVE-2026-23559 | Multiple RBAC issues in XAPIXen · XAPI | Critical9.4 |
| CVE-2026-23556 | oxenstored keeps quota related use counts across domain destructionXen · oxenstored | Critical9.4 |
| CVE-2025-58151 | varstored: TOCTOU issues with mapped guest memoryXen · varstored | Critical9.4 |
| CVE-2025-58146 | XAPI UTF-8 string handlingXen · XAPI | Critical9.4 |
| CVE-2025-27464 | WinPVDrivers: Excessive permissions on user-exposed devicesXen · Windows PV drivers | Critical9.4 |
| CVE-2025-27463 | WinPVDrivers: Excessive permissions on user-exposed devicesXen · Windows PV drivers | Critical9.4 |
| CVE-2025-27462 | WinPVDrivers: Excessive permissions on user-exposed devicesXen · Windows PV drivers | Critical9.4 |
| CVE-2026-42488 | x86: mismatched mapcache metadataXen · Xen | High8.1 |
| CVE-2026-42490 | domctl lock open to abuseXen · Xen | Medium6.5 |
| CVE-2026-42489 | domctl lock open to abuseXen · Xen | Medium5.3 |
| CVE-2026-42487 | x86 HVM I/O port list traversalXen · Xen | High7.9 |
| CVE-2026-23558 | grant table v2 race in status page mappingXen · Xen | High7.8 |
| CVE-2026-23557 | Xenstored DoS via XS_RESET_WATCHES commandXen · Xen | Medium6.5 |
| CVE-2026-23555 | Xenstored DoS by unprivileged domainXen · Xen | High7.1 |
| CVE-2026-23554 | Use after free of paging structures in EPTXen · Xen | High7.8 |