Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 401,367All CVEsplus 19,141 rejected
  • 471Last 24 hours2,753 in the last 7 days
  • 16,915Last 30 days1,566 of them critical
  • 1,769Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
202601000113
202505300812
20240310044

Latest CVEs

13 CVEs, newest first

CVEs, newest first
Title
CVE-2026-8374
Misuse and Misconfiguration of Cryptographic Algorithm in Bluetooth CommunicationSwitchBot · SwitchBot Lock
High8.5
CVE-2025-41459
Insecure authentication due to missing bruteforce protection and runtime manipulation in Two App Studio Journey 5.5.6 for iOSTwo App Studio · Journey
High7.8
CVE-2025-41458
Insecure data storage vulnerability in Two App Studio Journey v5.5.9 for iOSTwo App Studio · Journey
Medium5.5
CVE-2025-2306
Improper Access Control vulnerability in LIVE CONTRACTSYNCPILOT · LIVE CONTRACT
Medium5.9
CVE-2025-2305
Local file inclusion vulnerability in LIVE CONTRACTSYNCPILOT · LIVE CONTRACT
High8.6
CVE-2025-1865
Local Privilege Escalation in Virtual CloneDrive Kernel DriverElaborate Bytes AG · Virtual CloneDrive
High8.5
CVE-2025-0714
Insecure storage of sensitive information in MobaXTerm <25.0.Mobatek · MobaXterm
Medium6.5
CVE-2025-0543
G DATA Security Client Local privilege escalationG DATA CyberDefense AG · G DATA Security Client
High8.5
CVE-2025-0542
G DATA Management Server Local privilege escalationG DATA CyberDefense AG · G DATA Management Server
High7.3
CVE-2023-7273
Cross Site Request Forgery in Kiteworks OwnCloudKiteworks · OwnCloud
Medium6.8
CVE-2024-6510
Local privilege escalation vulnerability in AVG Internet SecurityAVG · Internet Security
High7.8
CVE-2024-7834
Local privilege escalation in OverwolfOverwolf · Overwolf
High7.8
CVE-2024-6689
Local privilege escalation vulnerability in baramundi Management Agent via MSI Installerbaramundi · Management Agent
High7.8