Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 2 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 399,660All CVEsplus 18,865 rejected
- 540Last 24 hours2,963 in the last 7 days
- 17,025Last 30 days1,508 of them critical
- 1,766Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 3 | 31 | 21 | 5 | 0 | 60 | 205 |
| 2025 | 1 | 1 | 17 | 2 | 0 | 21 | 145 |
| 2024 | 2 | 10 | 11 | 2 | 0 | 25 | 124 |
| 2023 | 0 | 7 | 7 | 3 | 0 | 17 | 99 |
| 2022 | 3 | 10 | 15 | 2 | 0 | 30 | 82 |
| 2021 | 2 | 8 | 9 | 1 | 0 | 20 | 52 |
| 2020 | 2 | 2 | 5 | 0 | 0 | 9 | 32 |
| 2019 | 1 | 4 | 2 | 0 | 0 | 7 | 23 |
| 2018 | 0 | 2 | 2 | 0 | 0 | 4 | 16 |
| 2017 | 0 | 2 | 4 | 0 | 0 | 6 | 12 |
| 2016 | 0 | 0 | 0 | 0 | 0 | 0 | 6 |
| 2015 | 0 | 0 | 0 | 0 | 0 | 0 | 6 |
| 2014 | 0 | 0 | 0 | 0 | 0 | 0 | 6 |
| 2013 | 0 | 0 | 0 | 0 | 0 | 0 | 6 |
| 2012 | 0 | 0 | 0 | 0 | 0 | 0 | 6 |
| 2011 | 0 | 0 | 0 | 0 | 0 | 0 | 6 |
| 2010 | 1 | 0 | 0 | 0 | 0 | 1 | 6 |
| 2009 | 0 | 1 | 0 | 0 | 0 | 1 | 5 |
| 2008 | 0 | 0 | 0 | 0 | 0 | 0 | 4 |
| 2007 | 1 | 1 | 0 | 0 | 0 | 2 | 4 |
| 2006 | 0 | 0 | 0 | 0 | 0 | 0 | 2 |
| 2005 | 0 | 1 | 0 | 0 | 0 | 1 | 2 |
| 2004 | 0 | 1 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-115403 | NULL pointer dereference in the BSD raw IPv6 send path when the destination table is fullEclipse Foundation · Eclipse ThreadX | High8.2 |
| CVE-2026-114408 | NULL pointer dereference in ICMPv6 Packet Too Big processing when the destination table is fullEclipse Foundation · Eclipse ThreadX | High8.7 |
| CVE-2026-118263 | Echo: BodyDump can discard BodyLimit overflow errors for unknown-length requestslabstack · echo | Medium6.3 |
| CVE-2026-111497 | Out-of-Bounds Write in Google Brotli DecoderExploitedGoogle · Brotli | Critical9.2 |
| CVE-2026-110353 | HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (worker-thread CPU exhaustion) via a truncated HTTP/2 PING…HAProxy · HAProxy | High7.5 |
| CVE-2026-56388 | Apache bRPC: Out-of-Bounds Write in Redis Command ParserApache Software Foundation · Apache bRPC | Critical9.1 |
| CVE-2026-48741 | libIEC61850: Remote NULL dereference in MMS Read alternate-access sub-array path leads to server-side DoSmz-automation · libiec61850 | High7.5 |
| CVE-2026-48503 | libIEC61850: Remote information disclosure in MMS file service via out-of-range initialPosition in fileOpen followed by fileReadmz-automation · libiec61850 | High7.5 |
| CVE-2026-77207 | Null Pointer Dereference in PKCS#7 bundle with no certificatesThe Libreswan Project · libreswan | High7.5 |
| CVE-2026-107838 | RIOT: nanocoap_fileserver ignores response initialization failure, leading to reachable assertionRIOT-OS · RIOT | High7.5 |
| CVE-2026-107785 | Crux Agent silently fails SKA preshared key rotation when SHA-512 peering is negotiatedSirius Computer, Inc. · Crux Agent | Medium6.3 |
| CVE-2026-106436 | Application denial of service and data truncation via unchecked BSON append failures in MongoDB PHP DriverMongoDB · PHP Driver | Medium6.3 |
| CVE-2026-18397 | SConnect: Native Host Unauthenticated Remote Code Execution VulnerabilityThales · SConnect | Critical9.4 |
| CVE-2026-95316 | Unchecked return value in Performance in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially read memory via a local program.…Google · Chrome | Low2.9 |
| CVE-2026-67409 | RabbitMQ: JWKS Fetch Ignores HTTP Response Status Code - Signing Key Destruction Causes Authentication DoSrabbitmq · rabbitmq-server | High8.2 |
| CVE-2026-98141 | ntfs: propagate reparse index insertion failureLinux · Linux | Medium5.5 |
| CVE-2026-98114 | ksmbd: propagate DACL parsing errorsLinux · Linux | Medium5.5 |
| CVE-2026-71180 | Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability. A low privileged attacker with local access could…Dell · Update Package Framework | High8.2 |
| CVE-2026-90648 | wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack. It does…WebAssembly · wabt | High7.1 |
| CVE-2026-86749 | snipe-it before 8.7.0 Data Loss via Failed Image Writegrokability · snipe-it | High7.0 |
| CVE-2026-86739 | Snipe-IT before 8.7.0 Acceptance Finalization Without Stored Evidencegrokability · snipe-it | Low2.3 |
| CVE-2026-86141 | xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length…xmlsoft · libxml2 | Low2.9 |
| CVE-2026-19534 | undici vulnerable to Denial of Service via unrequested WebSocket subprotocolundici · undici | High7.5 |
| CVE-2026-85649 | (Holloway) Chew, Kean Ho's Actualizer v1.2.0 and earlier contains a fail-open password validation vulnerability in the Alpha user and root user password loops…chewkeanho · software-actualizer | High7.9 |
| CVE-2026-14957 | FIPS mode assertion failure via malicious CERT payloadThe Libreswan Project · libreswan | High7.5 |
| CVE-2026-78699 | rename_tenant returns :ok on a failed rename, enabling cross-tenant access in AshPostgresash-project · ash_postgres | High7.2 |
| CVE-2026-79772 | Nokogiri before 1.19.1 Unchecked Return Value canonicalizesparklemotion · nokogiri | Medium6.9 |
| CVE-2026-77641 | tor before 0.4.9.9 was prone to a NULL write after free when sending a CONFLUX_SWITCH cell fails. The return value of relay_send_command_from_edge() was…torproject · Tor | Medium6.5 |
| CVE-2026-47245 | MyBB: Buddy list corruptionmybb · mybb | Medium4.3 |
| CVE-2026-62909 | .NET Elevation of Privilege VulnerabilityMicrosoft · .NET 10.0 runtime | High7.8 |
| CVE-2026-26080 | HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also…HAProxy · HAProxy | Low3.7 |
| CVE-2026-64040 | cachefiles: Fix error return when vfs_mkdir() failsLinux · Linux | Medium5.5 |
| CVE-2026-61857 | ImageMagick before 7.1.2-26 Heap Use-After-Free via XMPImageMagick · ImageMagick | Medium6.3 |
| CVE-2026-11972 | tarfile opened in streaming mode mishandles EOFPython Software Foundation · CPython | High8.2 |
| CVE-2026-46521 | ImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compressionImageMagick · ImageMagick | Medium5.5 |
| CVE-2026-40092 | nimiq-keys: Unchecked Ed25519 signature length in TaggedPublicKey::verify causes remote node panic via DHTnimiq · core-rs-albatross | High7.5 |
| CVE-2025-29938 | An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to write to an arbitrary memory address resulting in…AMD · AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt R") | High7.1 |
| CVE-2025-0028 | An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to read or modify an arbitrary address potentially…AMD · AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt R") | High8.3 |
| CVE-2026-40060 | BIG-IP Advanced WAF and ASM vulnerabilityF5 · BIG-IP | High8.7 |
| CVE-2026-20793 | Unchecked return value for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service.…Intel(R) QAT software drivers for Windows | Medium4.8 |
| CVE-2026-34065 | nimiq-primitives: Node crash due to missing interlink validation in election macro block proposalsnimiq · nimiq-primitives | High7.5 |
| CVE-2026-35344 | uutils coreutils dd Silent Data Corruption via Unconditional Truncation Error SuppressionUutils · coreutils | Low3.3 |
| CVE-2026-35468 | nimiq/core-rs-albatross: Panic in history index request handlers when a full node runs without the history indexnimiq · core-rs-albatross | Medium5.3 |
| CVE-2026-33983 | FreeRDP: Progressive Codec Quant BYTE Underflow - UB + CPU DoSFreeRDP · FreeRDP | Medium6.5 |
| CVE-2026-29905 | Kirby CMS through 5.1.4 allows an authenticated user with 'Editor' permissions to cause a persistent Denial of Service (DoS) via a malformed image upload. The… | Medium6.5 |
| CVE-2026-23301 | ASoC: SDCA: Add allocation failure check for Entity nameLinux · Linux | Medium5.5 |
| CVE-2026-31830 | sigstore-ruby verifier returns success for DSSE bundles with mismatched in-toto subject digestsigstore · sigstore-ruby | High7.5 |
| CVE-2026-28691 | ImageMagick has an uninitialized pointer dereference in JBIG decoderImageMagick · ImageMagick | High7.5 |
| CVE-2026-0723 | Unchecked Return Value in GitLabGitLab · GitLab | High7.4 |
| CVE-2026-21920 | Junos OS: SRX Series: If a specific request is processed by the DNS subsystem flowd will crashJuniper Networks · Junos OS | High8.7 |