Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,111All CVEsplus 18,873 rejected
- 792Last 24 hours3,267 in the last 7 days
- 17,395Last 30 days1,568 of them critical
- 1,767Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 8 | 8 | 3 | 0 | 0 | 19 | 116 |
| 2025 | 0 | 1 | 8 | 1 | 0 | 10 | 97 |
| 2024 | 0 | 3 | 1 | 0 | 0 | 4 | 87 |
| 2023 | 1 | 3 | 0 | 0 | 0 | 4 | 83 |
| 2022 | 1 | 6 | 1 | 1 | 0 | 9 | 79 |
| 2021 | 0 | 6 | 1 | 0 | 0 | 7 | 70 |
| 2020 | 5 | 7 | 4 | 0 | 0 | 16 | 63 |
| 2019 | 7 | 16 | 4 | 0 | 0 | 27 | 47 |
| 2018 | 6 | 6 | 0 | 0 | 0 | 12 | 20 |
| 2017 | 2 | 2 | 4 | 0 | 0 | 8 | 8 |
| Title | ||
|---|---|---|
| CVE-2026-93616 | Directory Traversal and File upload allows execution of arbitrary script on the Management ServerExploitedcheckpoint · Quantum Security Management | Critical9.8 |
| CVE-2026-91843 | Stack overflow in login process to the Security Management and Log Serverscheckpoint · Quantum Security Management | Critical9.8 |
| CVE-2026-85103 | Heap-based Buffer Overflow in VPN Certificate ASN.1 Decodingcheckpoint · Quantum Security Gateway | Critical9.8 |
| CVE-2026-85102 | Improper Certificate Validation in Quantum Security GatewayExploitedcheckpoint · Quantum Security Gateway | Critical9.8 |
| CVE-2026-18574 | Authentication Bypass in Check Point Security Management Servercheckpoint · Security Management Server | Critical9.3 |
| CVE-2026-62145 | Local Privilege Escalation in Gaia Portalcheckpoint · Quantum Security Gateway | High7.5 |
| CVE-2026-62144 | Management Authentication Bypass and Privilege Escalationcheckpoint · Quantum Security Management | Critical9.1 |
| CVE-2026-16232 | Authentication Bypass in the SmartConsole Login Process Using an Application TokenExploitedcheckpoint · Quantum Security Management | Critical9.3 |
| CVE-2026-10847 | Local Privilege Escalation vulnerability in Check Point Identity Agent Full for Windows OScheckpoint · Identity Agent | High7.8 |
| CVE-2026-50751 | User Authentication Bypass in VPN Remote Access and Mobile AccessExploitedcheckpoint · Quantum Security Gateway | Critical9.3 |
| CVE-2026-50752 | Certificate Validation Bypass in VPN Site-to-Site Connections Using IKEv1checkpoint · Quantum Security Gateway | High7.4 |
| CVE-2026-48136 | Authenticated Administrator Role-Based Access Control Bypass in Compliancecheckpoint · Quantum Security Management | Medium4.1 |
| CVE-2026-48135 | HTTP service can incorrectly process malformed HTTP requestscheckpoint · Quantum Security Gateway | Medium5.3 |
| CVE-2026-48134 | SQL injection issue in UserCheck Portal when DLP Software Blade is activecheckpoint · Quantum Security Gateway | Medium5.6 |
| CVE-2026-48133 | Identity Awareness Captive Portal - Unauthenticated Local File Inclusioncheckpoint · Quantum Security Gateway | High7.5 |
| CVE-2026-48132 | VPN service may restart unexpectedly when processing IKE traffic over NAT-T 4500/UDPcheckpoint · Quantum Security Gateway | High8.1 |
| CVE-2026-48131 | VPND IKE Fragment Reassembly - Heap Out-of-Bounds Write via Sequence Number Zerocheckpoint · Quantum Security Gateway | High8.1 |
| CVE-2026-3502 | TrueConf Client Update Integrity Verification BypassExploitedTrueConf · TrueConf Client | High7.8 |
| CVE-2025-9142 | Local privilege escalation in Harmony SASE Windows Agentcheckpoint · Hramony SASE | High7.5 |
| CVE-2025-8305 | Information Disclosure in Identity Agent Debug Filescheckpoint · Identity Awareness | Medium6.5 |
| CVE-2025-8304 | Information Disclosure in Identity Agent Registry Keyscheckpoint · Identity Agent | Medium6.5 |
| CVE-2025-3831 | Exposed SFTP servercheckpoint · Check Point Harmony SASE | High8.1 |
| CVE-2024-52885 | Path Traversalcheckpoint · Check Point Mobile Access | Medium5.0 |
| CVE-2025-2028 | Lack of TLS validationcheckpoint · Check Point Management Log Server | Medium6.5 |
| CVE-2024-24915 | SmartConsole Sensitive Credential Exposure via Memory Dumpcheckpoint · Check Point SmartConsole | Medium6.1 |
| CVE-2024-24916 | DLL-HiJackingcheckpoint · Check Point SmartConsole | Medium6.5 |
| CVE-2024-52888 | Stored-XSScheckpoint · Check Point Mobile Access | Medium5.4 |
| CVE-2024-52887 | Self-XSScheckpoint · Check Point Mobile Access | Low3.5 |
| CVE-2024-24911 | Out of Bounds read in the CPCA process on Check Point Management Servercheckpoint · Multi-Domain Security Management, Quantum Security Management | Medium5.3 |
| CVE-2024-24914 | Authenticated Gaia users can inject code or commands by global variables through special HTTP requests. A Security fix that mitigates this vulnerability is…checkpoint · ClusterXL, Multi-Domain Security Management, Quantum Appliances, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, Quantum Security Management | High8.0 |
| CVE-2024-24919 | Information disclosureExploitedcheckpoint · Check Point Quantum Gateway, Spark Gateway and CloudGuard Network | High8.6 |
| CVE-2024-24912 | Local privilege escalation in Harmony Endpoint Security Client for Windows via crafted DLL filecheckpoint · Harmony Endpoint Security Client for Windows | Medium6.7 |
| CVE-2024-24910 | LocalprivilegeescalationinCheckPointZoneAlarmExtremeSecurityNextGen,IdentityAgentforWindows,andIdentityAgentforWindowsTerminalServerviacraftedDLLfilecheckpoint · ZoneAlarmExtremeSecurityNextGen,IdentityAgentforWindows,IdentityAgentforWindowsTerminalServer | High7.3 |
| CVE-2023-28134 | Local Privliege Escalation in Check Point Endpoint Security Remediation Servicecheckpoint · Harmony Endpoint. | High7.8 |
| CVE-2023-28130 | Local user may lead to privilege escalation using Gaia Portal hostnames page.Quantum Appliances, Quantum Security Gateways | High7.2 |
| CVE-2023-28133 | Local privilege escalation in Check Point Endpoint Security Client (version E87.30) via crafted OpenSSL configuration fileHarmony Endpoint. | High7.8 |
| CVE-2023-28131 | A vulnerability in the expo.io framework allows an attacker to take over accounts and steal credentials on an application/website that configured the "Expo…Expo.io · Expo AuthSession module | Critical9.6 |
| CVE-2022-23746 | The IPsec VPN blade has a dedicated portal for downloading and connecting through SSL Network Extender (SNX). If the portal is configured for username/password…Gateway & Management, IPsec VPN blade SNX portal. | High7.5 |
| CVE-2022-23748 | mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In…ExploitedAudinate Dante Application Library for Windows | High7.8 |
| CVE-2022-23747 | In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music…Sony Xperia | Critical9.8 |
| CVE-2022-23745 | A potential memory corruption issue was found in Capsule Workspace Android app (running on GrapheneOS). This could result in application crashing but could not…Checkpoint Harmony Capsule Workspace | High7.5 |
| CVE-2022-23744 | Check Point Endpoint before version E86.50 failed to protect against specific registry change which allowed to disable endpoint protection by a local…Enterprise Endpoint Security Windows Clients. | Low2.3 |
| CVE-2022-23742 | Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low privileges. An…Check Point Endpoint Security Client for Windows | High7.8 |
| CVE-2021-30361 | The Check Point Gaia Portal's GUI Clients allowed authenticated administrators with permission for the GUI Clients settings to inject a command that would run…Check Point Gaia Portal | Medium6.7 |
| CVE-2022-23743 | Check Point ZoneAlarm before version 15.8.200.19118 allows a local actor to escalate privileges during the upgrade process. In addition, weak permissions in…ZoneAlarm. | High7.8 |
| CVE-2021-30360 | Users have access to the directory where the installation repair occurs. Since the MS Installer allows regular users to run the repair, an attacker can…Check Point Remote Access Client | High7.8 |
| CVE-2021-30359 | The Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to execute some steps during the installation. Because the MS…Check Point Harmony Browse and SandBlast Agent for Browsers | High7.8 |
| CVE-2021-30358 | Mobile Access Portal Native Applications who's path is defined by the administrator with environment variables may run applications from other locations by the…Check Point Mobile Access Portal Agent | High7.2 |
| CVE-2021-30355 | Amazon Kindle e-reader prior to and including version 5.13.4 improperly manages privileges, allowing the framework user to elevate privileges to root.Amazon Kindle e-reader | High8.6 |
| CVE-2021-30354 | Amazon Kindle e-reader prior to and including version 5.13.4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function…Amazon Kindle e-reader | High8.6 |