Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read just now.
At a glance
Published CVEs; rejected ones are not counted.
- 400,965All CVEsplus 19,118 rejected
- 400Last 24 hours2,835 in the last 7 days
- 16,818Last 30 days1,549 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 3 | 18 | 1 | 1 | 0 | 23 | 234 |
| 2025 | 1 | 13 | 42 | 5 | 0 | 61 | 211 |
| 2024 | 1 | 8 | 30 | 0 | 0 | 39 | 150 |
| 2023 | 3 | 31 | 23 | 5 | 0 | 62 | 111 |
| 2022 | 1 | 18 | 7 | 3 | 0 | 29 | 49 |
| 2021 | 2 | 11 | 5 | 2 | 0 | 20 | 20 |
| Title | ||
|---|---|---|
| CVE-2026-108185 | Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to conduct an information disclosure via…Zoom Communications · Zoom Clients | High7.4 |
| CVE-2026-108184 | Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure via network access.Zoom Communications · Zoom Clients | High7.4 |
| CVE-2026-53420 | Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalation of privilege via network access.Zoom Communications · Zoom Workplace | High8.0 |
| CVE-2026-53418 | Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an…Zoom Communications · Zoom Workplace | High8.1 |
| CVE-2026-53416 | Zoom VDI - Path TraversalZoom Communications · Zoom VDI | High7.1 |
| CVE-2026-53415 | Zoom Clients - Use After FreeZoom Communications · Zoom Clients | High8.3 |
| CVE-2026-53414 | Zoom Clients - Buffer Over-readZoom Communications · Zoom Clients | Medium6.5 |
| CVE-2026-53413 | Zoom Clients - Buffer Over-writeZoom Communications · Zoom Clients | High8.3 |
| CVE-2026-53412 | Zoom Workplace VDI Plugin for Windows - Improper Input ValidationZoom Communications · Zoom Workplace for Windows | Critical9.8 |
| CVE-2026-53411 | Zoom Workplace VDI Plugin for Windows - Improper Input ValidationZoom Communications · Zoom Workplace VDI Plugin | High7.8 |
| CVE-2026-53410 | Zoom Clients for Windows - Race ConditionZoom Communications · Zoom Clients | High7.0 |
| CVE-2026-53409 | Improper Privilege Management in Zoom Rooms for Windows before version 7.1.0 may allow an authenticated user to conduct an escalation of privilege via local…Zoom Communications · Zoom Rooms | High7.8 |
| CVE-2026-53408 | Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an…Zoom Communications · Zoom Workplace | High8.1 |
| CVE-2026-53407 | Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an…Zoom Communications · Zoom Workplace | High8.1 |
| CVE-2026-53406 | Insufficient Verification of Data Authenticity in Remote Control for Zoom Contact Center for Windows before version 7.0.0 may allow an authenticated user to…Zoom Communications · Remote Control for Zoom Contact Center | High7.8 |
| CVE-2026-30906 | Untrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via…Zoom Communications · Zoom Rooms | High7.8 |
| CVE-2026-30905 | External Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer before version 6.6.11 may allow an authenticated user to…Zoom Communications · Zoom Workplace VDI Plugin | High7.8 |
| CVE-2026-30904 | Protection Mechanism Failure in Zoom Workplace for iOS before version 7.0.0 may allow an authenticated user to conduct a disclosure of information via physical…Zoom Communications · Zoom Workplace | Low1.8 |
| CVE-2026-30903 | External Control of File Name or Path in the Mail feature of Zoom Workplace for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation…Zoom Communications · Zoom Workplace | Critical9.6 |
| CVE-2026-30902 | Zoom Clients for Windows - Improper Privilege ManagementZoom Communications Inc. · Zoom Workplace | High7.8 |
| CVE-2026-30901 | Zoom Rooms for Windows - Improper Input ValidationZoom Communications Inc. · Zoom Rooms | High7.0 |
| CVE-2026-30900 | Zoom Workplace Clients for Windows - Improper CheckZoom Communications Inc. · Zoom Workplace | High7.8 |
| CVE-2026-22844 | Zoom Node Deployments - Command InjectionZoom Communications Inc. · Zoom Node | Critical9.9 |
| CVE-2025-67460 | Zoom Rooms for Windows - Software Downgrade Protection Mechanism FailureZoom Communications Inc. · Zoom Rooms | High7.8 |
| CVE-2025-67461 | Zoom Rooms for macOS - External Control of File Name or PathZoom Communications Inc. · Zoom Rooms | Medium5.0 |
| CVE-2025-62484 | Zoom Workplace Clients - Inefficient Regular Expression ComplexityZoom Communications Inc. · Zoom Workplace | High8.1 |
| CVE-2025-62483 | Zoom Clients - Improper Removal of Sensitive InformationZoom Communications Inc. · Zoom Clients | Medium5.3 |
| CVE-2025-62482 | Zoom Workplace for Windows - Cross-site ScriptingZoom Communications Inc. · Zoom Workplace | Medium4.3 |
| CVE-2025-30662 | Zoom Workplace VDI Plugin macOS Universal Installer - Symlink FollowingZoom Communications Inc. · Zoom Workplace VDI Plugin macOS Universal installer | Medium6.6 |
| CVE-2025-30669 | Zoom Workplace Clients - Improper Certificate ValidationZoom Communications Inc. · Zoom Workplace Clients | Medium4.8 |
| CVE-2025-64741 | Zoom Workplace for Android - Improper Authorization HandlingZoom Communications Inc. · Zoom Workplace for Android | High8.1 |
| CVE-2025-64740 | Zoom Workplace VDI Client for Windows - Improper Verification of Cryptographic SignatureZoom Communications Inc. · Zoom Workplace VDI Client | High7.5 |
| CVE-2025-64739 | Zoom Clients - External Control of File Name or PathZoom Communications Inc. · Zoom Clients | Medium4.3 |
| CVE-2025-64738 | Zoom Workplace for macOS - External Control of File Name or PathZoom Communications Inc. · Zoom Workplace for macOS | Medium5.0 |
| CVE-2025-58133 | Zoom Rooms Clients - Authentication BypassZoom Communications Inc. · Zoom Rooms | Medium5.3 |
| CVE-2025-58132 | Zoom Clients for Windows - Command InjectionZoom Communications Inc. · Zoom Clients for Windows | Medium4.1 |
| CVE-2025-58131 | Zoom Workplace VDI Plugin macOS Universal installer for VMware Horizon - Race ConditionZoom Communications, Inc · Zoom Workplace VDI Plugin macOS Universal installer for VMware Horizon | Medium6.6 |
| CVE-2025-58135 | Zoom Workplace Clients for Windows - Improper Action EnforcementZoom Communications, Inc · Zoom Workplace Clients for Windows | Medium5.3 |
| CVE-2025-58134 | Zoom Workplace Clients for Windows - Incorrect AuthorizationZoom Communications, Inc · Zoom Workplace Clients for Windows | Medium4.3 |
| CVE-2025-49461 | Zoom Workplace Clients - Cross-site ScriptingZoom Communications, Inc · Zoom Workplace Clients | Medium4.3 |
| CVE-2025-49460 | Zoom Workplace Clients - Argument InjectionZoom Communications, Inc · Zoom Workplace Clients | Medium4.3 |
| CVE-2025-49459 | Zoom Workplace for Windows on ARM - Missing AuthorizationZoom Communications, Inc · Zoom Workplace for Windows on ARM | High7.8 |
| CVE-2025-49458 | Zoom Workplace Clients - Buffer OverflowZoom Communications, Inc · Zoom Workplace Clients | Medium6.5 |
| CVE-2025-49457 | Zoom Clients for Windows - Untrusted Search PathZoom Communications Inc · Zoom Clients for Windows | Critical9.6 |
| CVE-2025-49456 | Zoom Clients for Windows- Race ConditionZoom Communications Inc · Zoom Clients for Windows | Medium6.2 |
| CVE-2025-49464 | Zoom Clients for Windows- Classic Buffer OverflowZoom Communications Inc. · Zoom Clients for Windows | Medium6.5 |
| CVE-2025-49463 | Zoom Clients for iOS - Insufficient Control Flow ManagementZoom Communications Inc. · Zoom Clients for iOS | Medium6.5 |
| CVE-2025-49462 | Zoom Clients - Cross-site ScriptingZoom Communications Inc. · Zoom Clients | Low3.5 |
| CVE-2025-46789 | Zoom Clients for Windows - Classic Buffer OverflowZoom Communications Inc. · Zoom Clients for Windows | Medium6.5 |
| CVE-2025-46788 | Zoom Workplace for Linux - Improper Certificate ValidationZoom Communications Inc. · Zoom Workplace for Linux | High7.4 |