Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,797All CVEsplus 19,115 rejected
- 486Last 24 hours2,895 in the last 7 days
- 16,846Last 30 days1,547 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 16 | 72 | 47 | 3 | 0 | 138 | 326 |
| 2025 | 7 | 15 | 20 | 1 | 0 | 43 | 188 |
| 2024 | 2 | 13 | 9 | 0 | 0 | 24 | 145 |
| 2023 | 4 | 14 | 6 | 2 | 0 | 26 | 121 |
| 2022 | 3 | 12 | 12 | 1 | 0 | 28 | 95 |
| 2021 | 4 | 8 | 6 | 5 | 0 | 23 | 67 |
| 2020 | 1 | 22 | 14 | 2 | 0 | 39 | 44 |
| 2019 | 0 | 1 | 4 | 0 | 0 | 5 | 5 |
| Title | ||
|---|---|---|
| CVE-2026-88811 | Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxySUSE · Rancher | Critical9.1 |
| CVE-2026-88810 | Privilege escalation in downstream clusters via GlobalRole inheritedNamespacedRulesSUSE · Rancher | High7.2 |
| CVE-2026-88809 | Rancher meta proxy allowlist bypass leading to server-side request forgerySUSE · Rancher | High7.6 |
| CVE-2026-94290 | Privilege escalation to cluster-admin on the Rancher local cluster through Fleet's agent management controllerSUSE · Rancher | Critical9.1 |
| CVE-2026-104623 | Authorization bypass on the local cluster shell endpoint allows an unauthorized Rancher user to obtain a shell pod on the management clusterSUSE · Rancher | Medium6.3 |
| CVE-2026-104615 | Cluster identity takeover in Fleet cluster registration allows access to another cluster's Fleet namespaceSUSE · Rancher | High7.9 |
| CVE-2026-93536 | X.Org Server GestureBuildSprite Use-After-Freex.org · xorg-x11-server | Medium5.3 |
| CVE-2026-93524 | X.Org Server XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Readx.org · xorg-x11-server | Medium6.9 |
| CVE-2026-93523 | X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Writex.org · xorg-x11-server | High7.8 |
| CVE-2026-93522 | X.Org Server Glamor CopyArea Heap Buffer Overflowx.org · xorg-x11-server | High7.8 |
| CVE-2026-93521 | X.Org Server RandR ChangeProviderProperty Heap Buffer Overflowx.org · xorg-x11-server | High7.8 |
| CVE-2026-93520 | X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Writex.org · xorg-x11-server | High7.8 |
| CVE-2026-93519 | X.Org Server XFixes Pointer Barrier Event List Buffer Overflowx.org · xorg-x11-server | High7.8 |
| CVE-2026-93518 | X.Org Server XKB ResizeKeyType Numeric Truncationx.org · xorg-x11-server | High7.8 |
| CVE-2026-93517 | X.Org Server GLX RenderLarge Heap Buffer Overflowx.orgg · xorg-x11-server | High8.5 |
| CVE-2026-93516 | .Org Server XInput Passive Grab Use-After-Freex.org · xorg-x11-server | Medium5.5 |
| CVE-2026-93515 | .Org Server Present Extension Use-After-FreeX.org · xorg-x11-server | Medium6.8 |
| CVE-2026-88812 | X.Org Server XKB SetGeometry TextDoodad Double FreeX.org · xorg-x11-server | High7.8 |
| CVE-2026-109090 | libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflowx.org · libXi | High7.5 |
| CVE-2026-109088 | libXtst RECORD EnableContext Reply Endless LoopX.org · libXtst | Medium6.5 |
| CVE-2026-109089 | libXi XGetDeviceControl Control Type Mismatch Heap Buffer OverflowX.Org · libXi | High7.5 |
| CVE-2026-104618 | sdbootutil: world-readable debug logSUSE · SUSE Linux Enterprise Server 16.1 | Medium6.9 |
| CVE-2026-104617 | sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdlineSUSE · SUSE Linux Enterprise Server 16.1 | Medium5.9 |
| CVE-2023-32198 | Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacksSUSE · steve | High8.0 |
| CVE-2024-22031 | Rancher users who can create Projects can gain access to arbitrary projectsSUSE · rancher | High8.5 |
| CVE-2025-23390 | Fleet doesn’t validate a server’s certificate when connecting through SSHSUSE · fleet | Medium6.3 |
| CVE-2026-88804 | Unauthenticated update of public UI settings leading to stored cross-site scripting in RancherSUSE · Rancher | Critical9.6 |
| CVE-2026-88805 | Session Not Revoked Server-Side on Logout in RancherSUSE · Rancher | High8.1 |
| CVE-2026-88808 | Fleet agent copies downstream resources with cluster-admin privileges, allowing cross-namespace writes on downstream clustersSUSE · Rancher | High8.8 |
| CVE-2026-93540 | Fleet applies namespace labels and annotations without the bundle's service account privilegesSUSE · Rancher | Medium6.5 |
| CVE-2026-93539 | Unauthenticated GitRepo Spec Mutation via Fleet Git Webhook ReceiverSUSE · Rancher | Medium5.4 |
| CVE-2026-93538 | Cross-tenant BundleDeployment and Secret disclosure via spoofed cluster labels during agent-initiated registration in FleetSUSE · Rancher | High7.1 |
| CVE-2026-93537 | Path traversal in Fleet Helm valuesFiles allows disclosure of files outside the bundle directorySUSE · Rancher | Medium6.5 |
| CVE-2026-78424 | OS Command Injection in Packet-Capture (Sniffer) Filter leading to Remote Code Execution on Kubernetes NodesSUSE · NeuVector | High8.8 |
| CVE-2026-94287 | Denial of service via unsigned underflow in libXpm's write pathx.org · libXpm | Medium5.5 |
| CVE-2026-94286 | Out-of-bounds read in libXtst's RECORD reply parserx.org · libXtst | High7.1 |
| CVE-2026-94285 | Out-of-bounds read in libX11's byte-oriented codeset parserx.org · libX11 | Medium5.1 |
| CVE-2026-94284 | Out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration parser.registration parserx.org · libX11 | Medium5.5 |
| CVE-2026-94283 | Out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parserx.org · libX11 | Medium6.5 |
| CVE-2026-94282 | Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversionx.org · libXi | Medium5.6 |
| CVE-2026-94281 | Out-of-bounds read in libXi's XListInputDevices() class parsingx.org · libXi | Medium6.5 |
| CVE-2026-93545 | Out-of-bounds read in libXi's XListInputDevices()x.org · libXi | Medium6.5 |
| CVE-2026-93544 | Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsingx.org · libXi | Medium6.5 |
| CVE-2026-93543 | Out-of-bounds read in libXi's XI2 class parserx.org · libXi | High7.4 |
| CVE-2026-93542 | Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes()x.org · libXi | Medium6.5 |
| CVE-2026-93541 | Out-of-bounds read in libXi's XQueryDeviceState()X.org · libXi | Medium6.5 |
| CVE-2026-88807 | libXrender RenderQueryPictFormats Reply Heap-based Buffer OverflowX.org · libXrender | High8.9 |
| CVE-2026-88806 | libX11 XkbGetMap Reply Heap-based Buffer Overflowx.org · libX11 | High7.5 |
| CVE-2026-78427 | Admission Control Bypass via Hardcoded Sidecar Image ExemptionSUSE · github.com/neuvector/neuvector | Medium5.3 |
| CVE-2026-78425 | SAML Audience Confusion Allows Cross-SP AuthenticationSUSE · github.com/neuvector/neuvector | High7.6 |