Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,581All CVEsplus 19,141 rejected
- 684Last 24 hours2,967 in the last 7 days
- 17,118Last 30 days1,610 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 1 | 1 | 0 | 0 | 3 | 12 |
| 2025 | 0 | 2 | 0 | 0 | 0 | 2 | 9 |
| 2024 | 0 | 1 | 1 | 0 | 0 | 2 | 7 |
| 2023 | 0 | 1 | 1 | 0 | 0 | 2 | 5 |
| 2022 | 0 | 1 | 0 | 0 | 0 | 1 | 3 |
| 2021 | 0 | 0 | 1 | 0 | 0 | 1 | 2 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2019 | 0 | 0 | 0 | 1 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-44477 | CloudNativePG: Metrics exporter allows privilege escalation to PostgreSQL superuser and OS RCEcloudnative-pg · cloudnative-pg | Critical9.4 |
| CVE-2026-35535 | In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal…Sudo project · Sudo | High7.4 |
| CVE-2026-25704 | Incomplete privilege drop for com.system76.CosmicGreeter.GetUserDatapop-os · cosmic-greeter | Medium5.8 |
| CVE-2025-53819 | Nix's privilege dropping to build user broke for macOSNixOS · nix | High7.9 |
| CVE-2025-23395 | Local root exploit via `logfile_reopen()` in screen 5.0.0 with setuid-root bit setscreen | High7.3 |
| CVE-2024-35179 | Unprivileged Stalwart Mail Server user can read files as rootstalwartlabs · mail-server | Medium6.8 |
| CVE-2024-0985 | PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQLPostgreSQL | High8.0 |
| CVE-2023-38496 | Apptainer's ineffective privileges drop when requesting container networkapptainer · apptainer | Medium6.1 |
| CVE-2023-22648 | A Improper Privilege Management vulnerability in SUSE Rancher causes permission changes in Azure AD not to be reflected to users while they are logged in the…SUSE · Rancher | High8.0 |
| CVE-2022-3569 | Due to an issue with incorrect sudo permissions, Zimbra Collaboration Suite (ZCS) suffers from a local privilege escalation issue in versions 9.0.0 and prior,…Synacor · Zimbra Collaboration Suite (ZCS) | High7.8 |
| CVE-2020-35513 | A flaw incorrect umask during file or directory modification in the Linux kernel NFS (network file system) functionality was found in the way user create and…kernel | Medium4.9 |
| CVE-2019-11243 | In Kubernetes v1.12.0-v1.12.4 and v1.13.0, the rest.AnonymousClientConfig() method returns a copy of the provided config, with credentials removed (bearer…Kubernetes · Kubernetes | Low3.1 |