Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,807All CVEsplus 19,141 rejected
- 474Last 24 hours3,085 in the last 7 days
- 16,917Last 30 days1,578 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 94 | 61 | 5 | 1 | 161 | 190 |
| 2025 | 0 | 5 | 12 | 0 | 0 | 17 | 29 |
| 2024 | 0 | 3 | 3 | 0 | 0 | 6 | 12 |
| 2023 | 0 | 0 | 3 | 0 | 0 | 3 | 6 |
| 2022 | 0 | 1 | 1 | 0 | 0 | 2 | 3 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2019 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2018 | 0 | 0 | 1 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-84161 | Authenticated remote denial of service through unbounded zlib decompression in storeAnalysisStatisticsEricsson · CodeChecker | Medium4.9 |
| CVE-2026-119434 | Decompression bomb in ezstd:decompress_using_ddict/2 allows BEAM memory exhaustion via unbounded output buffersilviucpp · ezstd | Medium6.9 |
| CVE-2026-122323 | Kyverno 1.11.0 before 1.19.2 Memory Exhaustion via Notary Signature Decompressionkyverno · kyverno | High8.7 |
| CVE-2026-122322 | Kyverno from 1.11.0 before 1.19.2 Memory Exhaustion via Notary Attestation Decompressionkyverno · kyverno | High8.7 |
| CVE-2026-65059 | Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responsesFurl | High7.5 |
| CVE-2026-117677 | Gitea Helm chart upload decompression denial of serviceGitea · Gitea | Not scored |
| CVE-2026-118761 | Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memorykubeflow · pipelines | High7.5 |
| CVE-2026-118261 | Echo: Decompress permits unbounded gzip expansion in v4labstack · echo | High8.2 |
| CVE-2026-111073 | Apache Kafka: PushTelemetry (KIP-714) metrics payloads are decompressed without a size limit, allowing a broker out-of-memory denial of serviceApache Software Foundation · Apache Kafka | Medium6.5 |
| CVE-2026-116662 | Tanium addressed a compression bomb vulnerability in Enforce.Tanium · Enforce | High7.5 |
| CVE-2026-116579 | Autobahn Python: permessage-brotli inflates a whole frame before maxMessagePayloadSize is checked (incomplete fix of GHSA-hxp9-w8x3-p566)crossbario · autobahn-python | Medium5.9 |
| CVE-2026-65627 | Decompression bomb via unbounded zlib:inflate in jose_jwe_zip:uncompress/2Public exploitpotatosalad · jose | Medium6.9 |
| CVE-2026-93850 | Unbounded memory consumption during PDF text extractionMattermost · Mattermost | Medium6.5 |
| CVE-2026-97200 | Unbounded response body buffering and decompression in hackneybenoitc · hackney | High8.2 |
| CVE-2026-109584 | HTTP/2 cookie crumb join expands a small HPACK header block into an unbounded allocation in Banditmtrudel · bandit | High8.7 |
| CVE-2026-116175 | vLLM 0.19.0 before 0.24.0 Audio Decompression Bomb DoS via Chat Completionsvllm-project · vllm | High7.1 |
| CVE-2026-115638 | OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of uncompressed data, aka a gzip bomb.OpenStack · Ironic | Medium4.3 |
| CVE-2026-115503 | Ghidra before 12.2 Denial of Service via Compressed Extension ArchiveNationalSecurityAgency · ghidra | Medium6.8 |
| CVE-2026-115396 | Ghidra 10.3 before 12.2 Denial of Service via Compressed Theme ArchiveNationalSecurityAgency · ghidra | Medium6.8 |
| CVE-2026-113873 | SmileCDR HAPI FHIR improper data decompressionSmileCDR · HAPI FHIR | High8.7 |
| CVE-2026-93471 | Unbounded SAML message decompression in esaml allows memory exhaustionPublic exploithandnot2 · esaml | High8.7 |
| CVE-2026-96636 | Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)Public exploitpython-pillow · Pillow | Medium6.5 |
| CVE-2026-96637 | Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoSpython-pillow · Pillow | High7.1 |
| CVE-2026-114136 | Django REST framework: JSONParser applies an attacker-named codec to the request streamPublic exploitencode · django-rest-framework | High7.5 |
| CVE-2026-92823 | Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yamlRed Hat · Red Hat Enterprise Linux 10 | Medium6.2 |
| CVE-2026-90797 | Apache CouchDB: Pre-authentication gzip decompression bomb via POST /_sessionApache Software Foundation · Apache CouchDB | High7.7 |
| CVE-2026-112892 | Pillow: MSP RLE decoder expands a tiny file into unbounded memorypython-pillow · Pillow | High8.7 |
| CVE-2026-111924 | Fleet before 4.83.0 Denial of Service via Unbounded Gzip Decompressionfleetdm · fleet | High8.7 |
| CVE-2026-102477 | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a gRPC endpoint does have a configurable per message maximum…Eclipse Foundation · Eclipse Vert.x | High8.7 |
| CVE-2026-102072 | Junos OS: An authenticated attacker causes a denial of service when the gRPC extension-service is enabledJuniper Networks · Junos OS | High7.1 |
| CVE-2026-102695 | OmniFaces: Forged combined-resource IDs and related output/push boundariesomnifaces · omnifaces | High8.2 |
| CVE-2026-95502 | Git Sync memory exhaustion via a malicious Git serverGrafana · Nanogit | Medium5.3 |
| CVE-2026-97334 | Network messaging layer decompression resource exhaustionCommvault · Commvault Cloud | High8.7 |
| CVE-2026-105274 | hex_core decompresses registry and Erlang term API responses without size limitserlang · rebar3 | Low2.1 |
| CVE-2026-109324 | Grav before 2.1.7 Memory Exhaustion via Oversized Image Transformsgetgrav · grav | High7.1 |
| CVE-2026-109294 | Open WebUI 0.6.42 before 0.11.4 Memory Exhaustion via Compressed Remote Imageopen-webui · open-webui | High7.1 |
| CVE-2026-96618 | Hex exhausts memory and disk on oversized or compressed responses from an untrusted mirrorhexpm · hex | Low2.1 |
| CVE-2026-109398 | Gumlet php-image-resize before 3.0.1 Denial of Service via Decompression BombsPublic exploitgumlet · php-image-resize | High8.7 |
| CVE-2026-109229 | SGLang through 0.5.21 Decompression Bomb DoS via NanoNemotronVLImageProcessorPublic exploitsgl-project · sglang | High8.7 |
| CVE-2026-109226 | SGLang through 0.5.21 Audio Decompression Amplification via load_audioPublic exploitsgl-project · sglang | High8.7 |
| CVE-2026-108750 | OpenDocMan 2.4.0 through 2.10.0 Decompression Bomb DoS via Upload Text ExtractionOpenDocMan · OpenDocMan | Medium5.3 |
| CVE-2026-78384 | Apache CXF: Unbounded DEFLATE Decompression in CXF JOSE/JWE and SAML Processing (Decompression Bomb)Apache Software Foundation · Apache CXF | High7.5 |
| CVE-2026-107335 | Improper Handling of Highly Compressed Data in MalcolmPublic exploitCISA · Malcolm | Medium6.5 |
| CVE-2026-107227 | AsyncHttpClient: Unbounded WebSocket permessage-deflate decompression enables a decompression-bomb denial of service when compression is enabledAsyncHttpClient · async-http-client | High7.5 |
| CVE-2026-107210 | ImageMagick: Policy Bypass in MAT decoder when reading highly compressed dataImageMagick · ImageMagick | Medium5.3 |
| CVE-2026-106585 | In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data.OpenBSD · OpenSSH | Medium6.5 |
| CVE-2026-105747 | Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)docling-project · docling | Medium4.3 |
| CVE-2026-66054 | Apache Thrift: C++ THeaderTransport does not enforce configured maxFrameSizeApache Software Foundation · Apache Thrift | Medium6.9 |
| CVE-2026-94637 | Apache Thrift: Go `THeaderTransport` does not bound the inflated size of a ZLIB frameApache Software Foundation · Apache Thrift | High8.2 |
| CVE-2026-94636 | Apache Thrift: Python `TZlibTransport` stops enforcing its decompressed-size limit once the limit is exactly used upApache Software Foundation · Apache Thrift | High8.2 |