Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,359All CVEsplus 19,141 rejected
- 467Last 24 hours2,745 in the last 7 days
- 16,926Last 30 days1,563 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 4 | 3 | 0 | 0 | 7 | 20 |
| 2025 | 1 | 2 | 0 | 0 | 0 | 3 | 13 |
| 2024 | 0 | 1 | 0 | 1 | 0 | 2 | 10 |
| 2023 | 0 | 1 | 4 | 0 | 0 | 5 | 8 |
| 2022 | 0 | 1 | 0 | 0 | 0 | 1 | 3 |
| 2021 | 1 | 0 | 0 | 0 | 0 | 1 | 2 |
| 2020 | 0 | 0 | 1 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-86247 | Apache Tomcat Native: Client certificate requirements can be down-gradedApache Software Foundation · Apache Tomcat Native | High7.4 |
| CVE-2026-25687 | ZCC race condition in ZPA tunnel handlerZscaler · Client Connector | High8.1 |
| CVE-2026-46181 | RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()Linux · Linux | High7.8 |
| CVE-2026-23666 | .NET Framework Denial of Service VulnerabilityMicrosoft · Microsoft .NET Framework 3.5 | High7.5 |
| CVE-2026-3904 | Calling NSS-backed functions that support caching via nscd may call the nscd client side code and in the GNU C Library version 2.36 under high load on x86_64…The GNU C Library · glibc | Medium6.2 |
| CVE-2026-23684 | Race condition vulnerability in SAP Commerce CloudSAP_SE · SAP Commerce Cloud | Medium5.9 |
| CVE-2026-22819 | Outray has a Race Condition in main/apps/web/src/routes/api/$orgSlug/subdomains/index.tsakinloluwami · outray | Medium5.9 |
| CVE-2025-58143 | Mutiple vulnerabilities in the Viridian interfaceXen · Xen | Critical9.8 |
| CVE-2025-31115 | XZ has a heap-use-after-free bug in threaded .xz decodertukaani-project · xz | High8.7 |
| CVE-2024-10630 | A race condition in Ivanti Application Control Engine before version 10.14.4.0 allows a local authenticated attacker to bypass the application blocking…Ivanti · Application Control Engine | High7.8 |
| CVE-2024-6778 | Race in DevTools in Google Chrome prior to 126.0.6478.182 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML…Google · Chrome | High8.8 |
| CVE-2024-2032 | Race Condition Vulnerability in zenml-io/zenmlzenml-io · zenml-io/zenml | Low3.1 |
| CVE-2023-6546 | Kernel: gsm multiplexing race condition leads to privilege escalationRed Hat · Red Hat Enterprise Linux 8 | High7.0 |
| CVE-2023-4732 | Kernel: race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode bug in include/linux/swapops.hRed Hat · Red Hat Enterprise Linux 8 | Medium4.7 |
| CVE-2023-4127 | Race Condition within a Thread in answerdev/answeranswerdev · answerdev/answer | Medium6.5 |
| CVE-2023-3218 | Race Condition within a Thread in it-novum/openitcockpitit-novum · it-novum/openitcockpit | Medium6.5 |
| CVE-2015-10067 | oznetmaster SSharpSmartThreadPool SmartThreadPool.cs race conditionoznetmaster · SSharpSmartThreadPool | Medium4.6 |
| CVE-2022-1729 | A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain root privileges. The bug allows to…linux kernel | High7.0 |
| CVE-2021-26569 | Race Condition within a Thread vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to…Synology · Synology DiskStation Manager (DSM) | Critical9.8 |
| CVE-2020-1629 | Junos OS: A race condition vulnerability may cause RPD daemon to crash when processing a BGP NOTIFICATION message.Juniper Networks · Junos OS | Medium5.9 |