Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,562All CVEsplus 18,890 rejected
- 403Last 24 hours3,030 in the last 7 days
- 17,425Last 30 days1,598 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 3 | 5 | 16 | 3 | 0 | 27 | 106 |
| 2025 | 2 | 1 | 9 | 1 | 0 | 13 | 79 |
| 2024 | 4 | 4 | 7 | 2 | 0 | 17 | 66 |
| 2023 | 1 | 4 | 0 | 1 | 0 | 6 | 49 |
| 2022 | 0 | 4 | 2 | 1 | 0 | 7 | 43 |
| 2021 | 0 | 1 | 6 | 0 | 0 | 7 | 36 |
| 2020 | 0 | 3 | 10 | 0 | 0 | 13 | 29 |
| 2019 | 0 | 1 | 11 | 4 | 0 | 16 | 16 |
| Title | ||
|---|---|---|
| CVE-2026-109619 | RCE via stale global stateExploitedPHP Group · PHP | Critical9.2 |
| CVE-2026-109618 | RCE via OOM corruptionExploitedPHP Group · PHP | Critical9.2 |
| CVE-2026-92842 | OOB read / info leak in convert.* stream filters when line-break-chars contains NULPHP Group · PHP | Medium5.9 |
| CVE-2026-91768 | IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison (memcmp 12 bytes)PHP Group · PHP | Medium6.5 |
| CVE-2026-91769 | TLS Hostname Verification Falls Back to CN After SAN MismatchPHP Group · PHP | Medium4.3 |
| CVE-2026-91767 | Heap-buffer-overflow in php_openssl_matches_wildcard_name on crafted server cert wildcard CNPHP Group · PHP | Medium6.5 |
| CVE-2025-1218 | Various packet overreads in mysqlnd_writeprotocol.cPHP Group · PHP | Low3.4 |
| CVE-2026-91766 | Cross-origin credential leak in HTTP stream wrapper redirectsPHP Group · PHP | Medium5.9 |
| CVE-2026-91765 | SOAP: Unbounded Recursion in Server-Side cleanup_xml_nodePHP Group · PHP | High7.5 |
| CVE-2025-14181 | Integer overflow to buffer overflow in soap HTTP parsingPHP Group · PHP | Medium6.5 |
| CVE-2026-17545 | PHP on Windows: Reserved Device Names Are Not Rejected Before File/Stream I/O which can cause DoSPHP Group · PHP | Medium6.9 |
| CVE-2026-6103 | Phar TAR phar_tar_number() Integer Overflow - Archive Entry InjectionPHP Group · PHP | Medium4.3 |
| CVE-2026-93682 | Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location headerPHP Group · PHP | Medium5.8 |
| CVE-2026-7260 | Stack overflow in phar with circular symlinksPHP Group · PHP | Medium5.4 |
| CVE-2026-17544 | Out-of-bounds write in bccomp() via crafted operand and scalePHP Group · PHP | High8.1 |
| CVE-2026-17543 | SQL injection in ext-pgsql via E'...' backslash breakoutPHP Group · PHP | High8.1 |
| CVE-2026-14355 | ext/openssl: Memory corruption in openssl_encrypt with AES-WRAP-PADphp · php | Medium5.6 |
| CVE-2026-7263 | DoS attack via DOMNode::C14N()PHP Group · PHP | Medium6.3 |
| CVE-2026-6104 | Global buffer over-read in mb_convert_encoding() with attacker-supplied encodingPHP Group · PHP | Medium6.3 |
| CVE-2026-7258 | Out-of-bounds read in urldecode() on NetBSDPHP Group · PHP | Medium6.3 |
| CVE-2026-6722 | Use-After-Free in SOAP using Apache mapPHP Group · PHP | Critical9.5 |
| CVE-2026-7259 | Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()PHP Group · PHP | Low2.1 |
| CVE-2026-7261 | SoapServer session-persisted object use-after-free via SOAP header faultPHP Group · PHP | Medium6.3 |
| CVE-2026-7262 | NULL pointer dereference in SOAP apache:Map decoder with missing <value>PHP Group · PHP | Low2.9 |
| CVE-2025-14179 | SQL injection in pdo_firebird via NUL bytes in quoted stringsPHP Group · PHP | High7.4 |
| CVE-2026-7568 | Signed integer overflow in metaphone()PHP Group · PHP | Medium6.3 |
| CVE-2026-6735 | XSS within PHP-FPM status endpointPHP Group · PHP | High7.3 |
| CVE-2025-14177 | Information Leak of Memory in getimagesizePHP Group · PHP | Medium6.3 |
| CVE-2025-14178 | Heap buffer overflow in array_merge()PHP Group · PHP | Medium6.5 |
| CVE-2025-14180 | NULL Pointer Dereference in PDO quotingPHP Group · PHP | High8.2 |
| CVE-2025-1735 | pgsql extension does not check for errors during escapingPHP Group · PHP | Medium5.9 |
| CVE-2025-1220 | Null byte termination in hostnamesPHP Group · PHP | Low3.7 |
| CVE-2025-6491 | NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace PrefixPHP Group · PHP | Medium5.9 |
| CVE-2024-11235 | Reference counting in php_request_shutdown causes Use-After-FreePHP Group · PHP | Critical9.2 |
| CVE-2025-1861 | Stream HTTP wrapper truncates redirect location to 1024 bytesPHP Group · PHP | Medium6.3 |
| CVE-2025-1736 | Stream HTTP wrapper header check might omit basic auth headerPHP Group · PHP | Medium6.3 |
| CVE-2025-1734 | Streams HTTP wrapper does not fail for headers with invalid name and no colonPHP Group · PHP | Medium6.3 |
| CVE-2025-1219 | libxml streams use wrong content-type header when requesting a redirected resourcePHP Group · PHP | Medium6.3 |
| CVE-2025-1217 | Header parser of http stream wrapper does not handle folded headersPHP Group · PHP | Medium6.3 |
| CVE-2022-31631 | PDO::quote() may return unquoted stringPHP Group · PHP | Critical9.1 |
| CVE-2024-11233 | Single byte overread with convert.quoted-printable-decode filterPHP Group · PHP | Medium4.8 |
| CVE-2024-11234 | Configuring a proxy in a stream context might allow for CRLF injection in URIsPHP Group · PHP | Medium4.8 |
| CVE-2024-11236 | Integer overflow in the firebird and dblib quoters causing OOB writesPHP Group · PHP | Critical9.8 |
| CVE-2024-8929 | Leak partial content of the heap through heap buffer over-read in mysqlndPHP Group · PHP | Medium5.8 |
| CVE-2024-8932 | OOB access in ldap_escapePHP Group · PHP | Critical9.8 |
| CVE-2024-9026 | PHP-FPM logs from children may be alteredPHP Group · PHP | Low3.3 |
| CVE-2024-8927 | cgi.force_redirect configuration is bypassable due to the environment variable collisionPHP Group · PHP | High7.5 |
| CVE-2024-8926 | PHP CGI Parameter Injection Vulnerability (CVE-2024-4577 bypass)PHP Group · PHP | High8.1 |
| CVE-2024-8925 | Erroneous parsing of multipart form dataPHP Group · PHP | Low3.1 |
| CVE-2024-2408 | PHP is vulnerable to the Marvin AttackPHP Group · PHP | Medium5.9 |