Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,638All CVEsplus 19,141 rejected
- 668Last 24 hours2,951 in the last 7 days
- 17,123Last 30 days1,606 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 4 | 3 | 0 | 0 | 7 | 8 |
| 2025 | 0 | 1 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-77118 | Out-of-bounds write in GraphicsMagick PCD decoderGraphicsMagick Group · GraphicsMagick | High8.4 |
| CVE-2026-19693 | extract-zip arbitrary file write outside the destination directory via a symlink at the final path componentmax-mapper · extract-zip | High8.1 |
| CVE-2026-45819 | baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate…web-platform-dx · baseline-browser-mapping | Medium6.6 |
| CVE-2026-14257 | brace-expansion DoS via unbounded expansion length causing an out-of-memory process crashjuliangruber · brace-expansion | High7.5 |
| CVE-2026-45820 | fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync(). A crafted ZIP archive with a central directory entry declaring…101arrowz · fflate | Medium6.6 |
| CVE-2026-13149 | brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive…juliangruber · brace-expansion | High7.7 |
| CVE-2026-45822 | decode-uri-component through 0.4.1 is vulnerable to denial of service. The decode() function splits input on '%' producing N tokens and calls…SamVerschueren · decode-uri-component | Medium6.6 |
| CVE-2024-12905 | An Improper Link Resolution Before File Access ("Link Following") and Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal"). This…tar-fs | High7.5 |