Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,298All CVEsplus 19,140 rejected
- 453Last 24 hours2,724 in the last 7 days
- 16,917Last 30 days1,557 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 7 | 58 | 13 | 1 | 0 | 79 | 85 |
| 2025 | 0 | 0 | 4 | 1 | 1 | 6 | 6 |
| Title | ||
|---|---|---|
| CVE-2026-71884 | Packet CTR reports a full success length after the counter is exhaustedLegion of the Bouncy Castle Inc. · BC-LTS-JAVA | High8.2 |
| CVE-2026-71890 | MLS external commit can remove an arbitrary group memberLegion of the Bouncy Castle Inc. · BC-JAVA | High8.7 |
| CVE-2026-71891 | BLS12-381 key validation accepts a public key built on a foreign curveLegion of the Bouncy Castle Inc. · BC-JAVA | High7.1 |
| CVE-2026-18040 | HQC leaks private key information through secret-indexed GF(2^8) tables and a secret-dependent fixed-weight samplerLegion of the Bouncy Castle Inc. · BC-JAVA | Medium5.9 |
| CVE-2026-71885 | MLS X.509 credential not bound to the LeafNode signature keyLegion of the Bouncy Castle Inc. · BC-JAVA | Critical9.2 |
| CVE-2026-71886 | OpenPGP certification accepted from a subkey without certification authorityLegion of the Bouncy Castle Inc. · BC-JAVA | High8.2 |
| CVE-2026-71887 | OpenPGP data signature accepted from a signing subkey without cross-certificationLegion of the Bouncy Castle Inc. · BC-JAVA | High8.2 |
| CVE-2026-71883 | Native AES packet cipher returns the raw AES key on an aliasLegion of the Bouncy Castle Inc. · BC-LTS-JAVA | High8.2 |
| CVE-2026-71888 | CMS AuthenticatedData exposes attacker-inserted authAttrs when digestAlgorithm is absentLegion of the Bouncy Castle Inc. · BC-JAVA | High8.7 |
| CVE-2026-71889 | PKIXCertPathReviewer does not apply X.509 name constraints to the target certificateLegion of the Bouncy Castle Inc. · BC-JAVA | High8.7 |
| CVE-2026-71892 | CMS key-transport recipient key-size validation never runs for RFC 9709 HKDF-derived keysLegion of the Bouncy Castle Inc. · BC-JAVA | Medium6.9 |
| CVE-2026-85515 | OpenPGP message truncation not reported, bypassing the SEIPDv1 integrity checkLegion of the Bouncy Castle Inc. · BC-JAVA | High8.2 |
| CVE-2026-97873 | Legacy PBES1 and PKCS#12 PBE iteration count honoured unbounded in the raw JCA providerLegion of the Bouncy Castle Inc. · BC-JAVA | Medium5.3 |
| CVE-2026-18036 | NTRU leaks private key information by reducing secret values with a non-constant-time integer divisionLegion of the Bouncy Castle Inc. · BC-JAVA | High8.2 |
| CVE-2026-17508 | Password-based KDF cost parameters honoured unbounded from untrusted input across the remaining PBE entry pointsLegion of the Bouncy Castle Inc. · BC-JAVA | Medium5.3 |
| CVE-2026-17507 | MLS membership checks compare a uint32 leaf_index as signed, admitting an out-of-range senderLegion of the Bouncy Castle Inc. · BC-JAVA | High8.7 |
| CVE-2026-103604 | Quadratic-time escaping when converting X.509 distinguished names to stringsLegion of the Bouncy Castle Inc. · bc-csharp | High8.7 |
| CVE-2026-103603 | Unbounded HSS public key level count allows huge array allocation during signature verificationLegion of the Bouncy Castle Inc. · bc-csharp | High8.7 |
| CVE-2026-103602 | Name constraints bypass via trailing dot in rfc822Name, dNSName and URI hostsLegion of the Bouncy Castle Inc. · bc-csharp | High8.2 |
| CVE-2026-103601 | CcmBlockCipher and KCcmBlockCipher leave unverified plaintext in the output buffer after a failed tag checkLegion of the Bouncy Castle Inc. · bc-csharp | High8.2 |
| CVE-2026-103600 | Unbounded ASN.1 nesting depth causes process-terminating stack overflowLegion of the Bouncy Castle Inc. · bc-csharp | High8.7 |
| CVE-2026-63578 | Unbounded PBE iteration count when decrypting PKCS#8 private keysLegion of the Bouncy Castle Inc. · bc-csharp | High7.1 |
| CVE-2026-63577 | Name Constraints bypass: directoryName constraint matched at any position in the DN instead of as a prefixLegion of the Bouncy Castle Inc. · bc-csharp | High8.2 |
| CVE-2026-63576 | URI name constraints checked against a mis-parsed hostLegion of the Bouncy Castle Inc. · bc-csharp | High8.2 |
| CVE-2026-63575 | PKCS#12 key derivation loops about 2^32 times on a zero or negative iteration countLegion of the Bouncy Castle Inc. · bc-csharp | High7.1 |
| CVE-2026-63574 | Unbounded allocation from OpenPGP signature and user attribute subpacket lengthsLegion of the Bouncy Castle Inc. · bc-csharp | High8.7 |
| CVE-2026-63573 | Bleichenbacher padding oracle in CMS RSA PKCS#1 v1.5 key-transport unwrapLegion of the Bouncy Castle Inc. · bc-csharp | High8.2 |
| CVE-2026-63572 | Unbounded MAC and bag-decryption iteration counts when loading PKCS#12 filesLegion of the Bouncy Castle Inc. · bc-csharp | High7.1 |
| CVE-2026-63571 | Attribute certificate path validation does not verify the attribute certificate's signatureLegion of the Bouncy Castle Inc. · bc-csharp | High8.7 |
| CVE-2026-63570 | Pkcs12Store.GetCertificateChain loops forever on cyclic issuer linksLegion of the Bouncy Castle Inc. · bc-csharp | High7.1 |
| CVE-2026-63569 | MTI/A0 DHAgreement does not validate the peer's ephemeral valueLegion of the Bouncy Castle Inc. · bc-csharp | Critical9.1 |
| CVE-2026-63568 | Unbounded CMP/CRMF password-based MAC iteration count allows CPU exhaustionLegion of the Bouncy Castle Inc. · bc-csharp | High8.7 |
| CVE-2026-63567 | IesEngine block-cipher mode checks padding before MAC (CBC padding oracle)Legion of the Bouncy Castle Inc. · bc-csharp | High8.2 |
| CVE-2026-63566 | DTLS handshake reassembler allocates buffer from unchecked 24-bit lengthLegion of the Bouncy Castle Inc. · bc-csharp | High8.7 |
| CVE-2026-16001 | IesEngine stream-mode MAC forgery via length-dependent KDF splitLegion of the Bouncy Castle Inc. · bc-csharp | High8.2 |
| CVE-2026-16000 | KCcmBlockCipher (DSTU 7624 CCM) tag not bound to nonce when no associated data is usedLegion of the Bouncy Castle Inc. · bc-csharp | High8.7 |
| CVE-2026-15999 | AES-CCM decryption accepts zero or out-of-range tag length, bypassing authenticationLegion of the Bouncy Castle Inc. · bc-csharp | High8.2 |
| CVE-2026-13505 | Zeroisation of sensitive key material on garbage collection relies on finalizationLegion of the Bouncy Castle Inc. · BC-FJA | High8.7 |
| CVE-2026-8798 | Native entropy source retries the CPU entropy instructions without limitLegion of the Bouncy Castle Inc. · BC-FJA | High8.7 |
| CVE-2026-13586 | PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS)Legion of the Bouncy Castle Inc. · BC-JAVA | Medium5.3 |
| CVE-2026-13506 | Lazy ASN.1 sequence forcing resets nesting-depth guardLegion of the Bouncy Castle Inc. · BC-JAVA | High8.7 |
| CVE-2026-12860 | RSA PKCS#1 verification skips last two hash bytes in NULL-omitted pathLegion of the Bouncy Castle Inc. · BC-JAVA | High8.7 |
| CVE-2026-12852 | MLS wire decoder allocates attacker-declared opaque length before bounds checkLegion of the Bouncy Castle Inc. · BC-JAVA | High8.7 |
| CVE-2026-12817 | OpenPGP AEAD decryption skips final tag on chunk-aligned dataLegion of the Bouncy Castle Inc. · BC-JAVA | High8.7 |
| CVE-2026-12816 | IESEngine stream-mode MAC forgery via length-dependent KDF splitLegion of the Bouncy Castle Inc. · BC-JAVA | High8.7 |
| CVE-2026-12803 | KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery)Legion of the Bouncy Castle Inc. · BC-JAVA | High8.7 |
| CVE-2026-12802 | CMS AuthEnvelopedData fails to enforce tag-length on decryptionLegion of the Bouncy Castle Inc. · BC-JAVA | High8.7 |
| CVE-2026-14682 | Possible OOM from unbounded up-front allocation on a definite-length readLegion of the Bouncy Castle Inc. · BC-JAVA | High8.7 |
| CVE-2026-58059 | Quadratic-time escaping when stringifying X.500 distinguished namesLegion of the Bouncy Castle Inc. · BC-JAVA | High8.7 |
| CVE-2026-58060 | HSS public-key level count unbounded, enabling huge allocation on verifyLegion of the Bouncy Castle Inc. · BC-JAVA | High8.7 |