Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,177All CVEsplus 18,875 rejected
- 815Last 24 hours3,234 in the last 7 days
- 17,390Last 30 days1,566 of them critical
- 1,767Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 26 | 13 | 0 | 0 | 39 | 139 |
| 2025 | 0 | 12 | 2 | 0 | 0 | 14 | 100 |
| 2024 | 0 | 9 | 1 | 0 | 0 | 10 | 86 |
| 2023 | 0 | 9 | 0 | 0 | 0 | 9 | 76 |
| 2022 | 0 | 7 | 6 | 0 | 0 | 13 | 67 |
| 2021 | 0 | 5 | 2 | 0 | 0 | 7 | 54 |
| 2020 | 0 | 5 | 4 | 0 | 0 | 9 | 47 |
| 2019 | 0 | 14 | 23 | 1 | 0 | 38 | 38 |
| Title | ||
|---|---|---|
| CVE-2026-97313 | Specific RPZ configurations and query patterns may result in an unexpected exitISC · BIND 9 | High7.5 |
| CVE-2026-96888 | Named may terminate unexpectedly when a redirect zone is used with strict QNAME minimizationISC · BIND 9 | High7.5 |
| CVE-2026-94300 | Concurrent GSS-TSIG messages corrupt memoryISC · BIND 9 | High8.1 |
| CVE-2026-19630 | Amplified resource exhaustion in inbound message processingISC · BIND 9 | High7.5 |
| CVE-2026-77119 | NSEC3 insecure-referral proof can use unrelated cached NSEC3 RRsetsISC · BIND 9 | Medium5.9 |
| CVE-2026-75029 | Message parser retains every identical singleton RDATA, enabling wire-to-work amplificationISC · BIND 9 | Medium5.3 |
| CVE-2026-19668 | Resource Exhaustion via Excessive DNSSEC Cryptographic Material MatchingISC · BIND 9 | Medium5.3 |
| CVE-2026-19033 | Unauthenticated IXFR deltas are applied to the live zone before TSIG verificationISC · BIND 9 | Medium6.5 |
| CVE-2026-80274 | Validating resolver can abort while caching a mismatched NOQNAME proofISC · BIND 9 | High7.5 |
| CVE-2026-76163 | named aborts on a TKEY query when the user configuration has no global options statementISC · BIND 9 | High7.5 |
| CVE-2026-19666 | Use-after-free in query_addnoqnameproof() via the DNS64 filter64 pathISC · BIND 9 | High7.5 |
| CVE-2026-81563 | SVCB AliasMode additional-data error leaks qpcache referencesISC · BIND 9 | High7.5 |
| CVE-2026-78301 | Out-of-zone database nodes can become authoritative zone cutsISC · BIND 9 | Medium5.8 |
| CVE-2026-77692 | Unauthenticated remote crash of named via a single DoH SIG(0) requestISC · BIND 9 | High7.5 |
| CVE-2026-19941 | checkwildcard() accepts an out-of-zone NSEC as a wildcard-nonexistence proofISC · BIND 9 | Medium5.9 |
| CVE-2026-19662 | qpcache NOQNAME proof use-after-free crashes recursive resolverISC · BIND 9 | Medium5.9 |
| CVE-2026-19667 | Remote assertion failure via 16-bit length truncation in `dns_ncache_add()`ISC · BIND 9 | High7.5 |
| CVE-2026-81736 | Remote CPU denial of service through cached SVCB/HTTPS AliasMode treesISC · BIND 9 | High7.5 |
| CVE-2026-13321 | DNSSEC Validation Bypass via Out-of-Zone NSEC Next FieldISC · BIND 9 | High8.6 |
| CVE-2026-13204 | Unexpected exit in certain situations with NSEC and NSEC3 both presentISC · BIND 9 | High7.5 |
| CVE-2026-12617 | Record ordering based unexpected exit with CNAME or DNAMEISC · BIND 9 | High7.5 |
| CVE-2026-11721 | Cache poisoning possible with label count discrepancy, RRSIG, and wildcardsISC · BIND 9 | High7.5 |
| CVE-2026-11622 | Potential memory usage beyond configured limitsISC · BIND 9 | High7.5 |
| CVE-2026-11605 | Unnecessary validation of DNSSEC signed recordsISC · BIND 9 | High7.5 |
| CVE-2026-11331 | Potential wildcard CNAME RPZ policy bypassISC · BIND 9 | High7.5 |
| CVE-2026-10822 | Key Record using PRIVATEDNS algorithm may lead to unexpected exitISC · BIND 9 | Medium6.5 |
| CVE-2026-10723 | Incorrect acceptance of NSEC3 recordsISC · BIND 9 | Medium6.8 |
| CVE-2026-5950 | Unbounded resend loop in BIND 9 resolverISC · BIND 9 | Medium5.3 |
| CVE-2026-5947 | SIG(0) validation during query flood may lead to undefined behaviorISC · BIND 9 | High7.5 |
| CVE-2026-5946 | Invalid handling of CLASS != INISC · BIND 9 | High7.5 |
| CVE-2026-3593 | Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementationISC · BIND 9 | High7.4 |
| CVE-2026-3592 | Amplification vulnerabilities via self-pointed glue recordsISC · BIND 9 | Medium5.3 |
| CVE-2026-3039 | BIND 9 server memory exhaustion during GSS-API TKEY negotiationISC · BIND 9 | High7.5 |
| CVE-2026-3591 | A stack use-after-return flaw in SIG(0) handling code may enable ACL bypassISC · BIND 9 | Medium5.4 |
| CVE-2026-3119 | Authenticated query containing a TKEY record may cause named to terminate unexpectedlyISC · BIND 9 | Medium6.5 |
| CVE-2026-3104 | Memory leak in code preparing DNSSEC proofs of non-existenceISC · BIND 9 | High7.5 |
| CVE-2026-1519 | Excessive NSEC3 iterations cause high CPU load during insecure delegation validationISC · BIND 9 | High7.5 |
| CVE-2026-3608 | Stack overflow in Kea daemonsISC · Kea | High7.5 |
| CVE-2025-13878 | Malformed BRID/HHIT records can cause named to terminate unexpectedlyISC · BIND 9 | High7.5 |
| CVE-2025-11232 | Invalid characters cause assertISC · Kea | High7.5 |
| CVE-2025-40780 | Cache poisoning due to weak PRNGISC · BIND 9 | High8.6 |
| CVE-2025-40778 | Cache poisoning attacks with unsolicited RRsISC · BIND 9 | High8.6 |
| CVE-2025-8677 | Resource exhaustion via malformed DNSKEY handlingISC · BIND 9 | High7.5 |
| CVE-2025-8696 | DoS attack against the Stork UI from an unauthenticated userISC · Stork | High7.5 |
| CVE-2025-40779 | Kea crash upon interaction between specific client options and subnet selectionISC · Kea | High7.5 |
| CVE-2025-40777 | A possible assertion failure when 'stale-answer-client-timeout' is set to '0'ISC · BIND 9 | High7.5 |
| CVE-2025-40776 | Birthday Attack against Resolvers supporting ECSISC · BIND 9 | High8.6 |
| CVE-2025-32803 | Insecure file permissions can result in confidential information leakageISC · Kea | Medium4.0 |
| CVE-2025-32802 | Insecure handling of file paths allows multiple local attacksISC · Kea | Medium6.1 |
| CVE-2025-32801 | Loading a malicious hook library can lead to local privilege escalationISC · Kea | High7.8 |