Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,807All CVEsplus 19,141 rejected
- 473Last 24 hours3,082 in the last 7 days
- 16,902Last 30 days1,575 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 20 | 30 | 4 | 1 | 57 | 178 |
| 2025 | 1 | 22 | 16 | 1 | 0 | 40 | 121 |
| 2024 | 5 | 19 | 12 | 5 | 0 | 41 | 81 |
| 2023 | 0 | 4 | 7 | 0 | 0 | 11 | 40 |
| 2022 | 0 | 5 | 12 | 0 | 0 | 17 | 29 |
| 2021 | 0 | 2 | 3 | 0 | 0 | 5 | 12 |
| 2020 | 0 | 1 | 2 | 0 | 0 | 3 | 7 |
| 2019 | 0 | 2 | 1 | 0 | 0 | 3 | 4 |
| 2018 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2017 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2016 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2015 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2014 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2013 | 0 | 0 | 1 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-80301 | Avast sandbox escape via unpreserved COM pathway through Task SchedulerGen Digital · Avast Antivirus, Avast One, Avast Premium Security, Avast Ultimate | Not scored |
| CVE-2026-20599 | In Modem, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor…MediaTek, Inc. · MediaTek chipset | Medium6.7 |
| CVE-2026-20577 | In Modem, there is a possible permission bypass due to a permissions bypass. This could lead to local denial of service if a malicious actor has already…MediaTek, Inc. · MediaTek chipset | Medium4.4 |
| CVE-2026-3322 | Privilege escalation via request replaying in Lobster_proLobster DATA GmbH · Lobster_pro | Medium5.6 |
| CVE-2026-63792 | Gitea private reusable workflow disclosure to fork runsGitea · Gitea | Medium5.3 |
| CVE-2026-21121 | Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs.Samsung Mobile · Samsung Mobile Devices | Medium6.9 |
| CVE-2026-79403 | An issue in Kilo Code before v7.4.1 allows a local attacker to execute arbitrary code via the permission/allow-everything endpoint | High8.4 |
| CVE-2026-56729 | Zammad: Titles of knowledge base answers will be shown across all categories via the global searchzammad · zammad | Low2.1 |
| CVE-2026-96872 | WikiLambda public function execution bypasses the unsaved-code permission through nested Z825 compositionsThe Wikimedia Foundation · Mediawiki - WikiLambda Extension | Low2.9 |
| CVE-2026-90462 | Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorizationPublic exploitRed Hat · Red Hat Enterprise Linux 10 | Medium5.4 |
| CVE-2026-54471 | Dell SmartFabric Manager, versions prior to 2.2.1, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged…Dell · SmartFabric Manager | Low3.5 |
| CVE-2026-1759 | Improper handling of insufficient permissions or privileges vulnerability in Secomea GateManager allows Privilege Escalation. This issue affects GateManager:…Secomea · GateManager | Medium6.5 |
| CVE-2026-84631 | This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27. An app may be able to gain root privileges.Apple · macOS | High7.8 |
| CVE-2026-64701 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A malicious app may be able to…Apple · macOS | High7.8 |
| CVE-2026-86917 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may…Apple · macOS | High7.8 |
| CVE-2026-43786 | This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be…Apple · macOS | High7.8 |
| CVE-2026-21099 | Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information.Samsung Mobile · Samsung Mobile Devices | Medium5.1 |
| CVE-2026-69907 | Windows Enterprise App Management Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1607 | High7.8 |
| CVE-2026-55468 | Wagtail: Improper restriction handling on Pages admin APIwagtail · wagtail | Medium4.3 |
| CVE-2026-59567 | Local privilege escalationZscaler · Client Connector | High8.8 |
| CVE-2026-58416 | Fork-PR Actions task can read a third private repository via the collaborative-owner branch (missing fork-PR guard)Gitea · Gitea Open Source Git Server | High7.1 |
| CVE-2026-73239 | Apache Allura: Missing permission checks IDORApache Software Foundation · Apache Allura | Medium6.5 |
| CVE-2026-18860 | Velociraptor incorrect Org deletion permissions checkRapid7 · Velociraptor | High8.7 |
| CVE-2026-11804 | Program Module VulnerabilityTridium · Niagara Framework | Medium5.2 |
| CVE-2026-62393 | Apache Kylin: Improper authorization in job information retrievalApache Software Foundation · Apache Kylin | Medium4.3 |
| CVE-2026-45196 | GPU DDK - Arbitrary GPU register write in rgxfw_hwperf_hw due to unsanitized pointers from host kernelImagination Technologies · Graphics DDK | High7.8 |
| CVE-2026-54262 | Wagtail: Pages translations can be created without page permissions when using simple_translationwagtail · wagtail | Medium4.3 |
| CVE-2026-54261 | Wagtail: Improper permission handling in image previewwagtail · wagtail | Medium6.5 |
| CVE-2026-54259 | Wagtail: Improper restriction handling on Documents and Images chosen endpointswagtail · wagtail | Medium4.3 |
| CVE-2026-20463 | In Modem, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege if a malicious actor has…MediaTek, Inc. · MediaTek chipset | Medium6.7 |
| CVE-2026-45195 | GPU DDK - rgxfw_set_mips_fault_address(&psInit->sFaultPhysAddr) is untrustedImagination Technologies · Graphics DDK | High7.8 |
| CVE-2026-41566 | Apache Kvrocks: Improper permission for the APPLYBATCH commandApache Software Foundation · Apache Kvrocks | Critical9.4 |
| CVE-2026-40371 | Microsoft Dynamics 365 (on-premises) Elevation of Privilege VulnerabilityMicrosoft · Microsoft Dynamics 365 (on-premises) version 9.1 | High8.8 |
| CVE-2026-11764 | Data exposed without proper permissionpretix · pretix | Low3.6 |
| CVE-2026-10549 | Privilege escalation in Yandex DatabaseYandex · Yandex Database | Medium5.3 |
| CVE-2026-9792 | Keycloak: keycloak: security restriction bypass allows unauthorized ropc token acquisitionRed Hat · Red Hat build of Keycloak 26.4 | Medium6.5 |
| CVE-2026-46054 | selinux: fix overlayfs mmap() and mprotect() access checksLinux · Linux | High7.1 |
| CVE-2026-2340 | Samba: vfs_worm does not block directory modificationRed Hat · Red Hat Enterprise Linux 10 | Medium6.5 |
| CVE-2026-44201 | Wagtail: Improper restriction handling on Documents and Images APIwagtail · wagtail | Medium5.3 |
| CVE-2026-44200 | Wagtail: Improper permission handling when copying pageswagtail · wagtail | Medium6.5 |
| CVE-2026-44199 | Wagtail: Improper permission handling when deleting form submissionswagtail · wagtail | Medium6.5 |
| CVE-2026-44198 | Wagtail: Improper permission handling when viewing page historywagtail · wagtail | Medium4.3 |
| CVE-2026-44197 | Wagtail: Improper permission handling when comparing revisionswagtail · wagtail | Medium6.5 |
| CVE-2026-6805 | Vulnerability on Cryptobox external sharing featureErcom · Cryptobox | Medium6.9 |
| CVE-2026-20448 | In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious…MediaTek, Inc. · MediaTek chipset | Medium6.7 |
| CVE-2026-21733 | GPU DDK - Incorrect flags validation in RGXDerivePTEProt8 can allow GPU to overwrite read-only shared memory (e.g. libc.so)Imagination Technologies · Graphics DDK | High7.3 |
| CVE-2026-27910 | Windows Installer Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1607 | High7.8 |
| CVE-2026-24096 | Insufficient permission validation on multiple REST API Quick Setup endpointsCheckmk GmbH · Checkmk | Medium5.3 |
| CVE-2026-2123 | Privilege escalation vulnerability in Operations AgentOpenText · Operations Agent | High8.6 |
| CVE-2026-3190 | Keycloak: keycloak: information disclosure via improper role enforcement in uma 2.0 protection apiRed Hat · Red Hat build of Keycloak 26.4 | Medium4.3 |