Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,644All CVEsplus 19,141 rejected
- 674Last 24 hours2,957 in the last 7 days
- 17,129Last 30 days1,607 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 11 | 6 | 3 | 0 | 21 | 42 |
| 2025 | 0 | 3 | 11 | 1 | 0 | 15 | 21 |
| 2024 | 0 | 1 | 3 | 0 | 0 | 4 | 6 |
| 2023 | 0 | 1 | 0 | 0 | 0 | 1 | 2 |
| 2022 | 0 | 1 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-119200 | Nuxt: Dot segments in the request path bypass `server/middleware` path checks and server route rules on page routesnuxt · nuxt | Medium6.5 |
| CVE-2026-112343 | Syncplify Server! < 8.8.0 Permission Override Bypass via Path CasingSyncplify, Inc. · Syncplify Server! | High8.6 |
| CVE-2026-110725 | fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix referencesfast-uri · fast-uri | Low3.7 |
| CVE-2026-110095 | fast-uri vulnerable to improper path equivalence in relative reference normalizationfast-uri · fast-uri | Low3.7 |
| CVE-2026-108463 | Windows SmartScreen Security Feature Bypass VulnerabilityMicrosoft · Windows 11 Version 24H2 | High8.8 |
| CVE-2026-102217 | WebDAV Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1607 | High8.8 |
| CVE-2026-70184 | Windows Backup Engine Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 21H2 | High7.8 |
| CVE-2026-88136 | Web Distributed Authoring and Versioning (WEBDAV) Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1607 | High8.8 |
| CVE-2026-102231 | Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft · Visual Studio Code | High7.7 |
| CVE-2026-93709 | Dancer2 versions before 2.2.0 for Perl serve a layout as a page when an equivalent spelling of its path misses the guard in the AutoPage handlerDancer2 | Medium5.3 |
| CVE-2026-57441 | MCPVault: PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalencebitbonsai · mcpvault | High8.4 |
| CVE-2026-85978 | Unauthenticated Remote Code Execution in Akana API PlatformPerforce · Akana | Critical10.0 |
| CVE-2026-73019 | Windows URL Moniker Security Feature Bypass VulnerabilityMicrosoft · Windows 10 Version 1607 | Medium4.3 |
| CVE-2026-72835 | filebrowser before v2.63.21 Access Rule Bypass via Path Canonicalizationfilebrowser · filebrowser | High7.6 |
| CVE-2026-66064 | goshs has ACL Bypass & Path Traversalgoshs-labs · goshs | Medium5.3 |
| CVE-2026-49401 | Deno Permission Bypass via Unicode Normalization Mismatch on macOS (APFS)denoland · deno | High7.3 |
| CVE-2026-50568 | Fission: SanitizeFilePath lexical HasPrefix bypass permits sibling-directory escapefission · fission | Low3.6 |
| CVE-2026-5816 | Improper Resolution of Path Equivalence in GitLabGitLab · GitLab | High8.0 |
| CVE-2026-34510 | OpenClaw < 2026.3.22 - Remote File URL Acceptance in Windows Media LoadersOpenClaw · OpenClaw | Medium6.9 |
| CVE-2026-34451 | Claude SDK for TypeScript: Memory Tool Path Validation Allows Sandbox Escape to Sibling Directoriesanthropics · anthropic-sdk-typescript | Medium6.3 |
| CVE-2026-23674 | MapUrlToZone Security Feature Bypass VulnerabilityMicrosoft · Windows 10 Version 1607 | High7.5 |
| CVE-2025-58290 | Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.Huawei · HarmonyOS | Low3.3 |
| CVE-2025-43298 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8,…Apple · macOS | High7.8 |
| CVE-2025-54107 | MapUrlToZone Security Feature Bypass VulnerabilityMicrosoft · Windows 10 Version 1507 | Medium4.3 |
| CVE-2024-8765 | Improper Path Equivalence Resolution in lunary-ai/lunarylunary-ai · lunary-ai/lunary | High7.3 |
| CVE-2024-6839 | Improper Regex Path Matching in corydolphin/flask-corscorydolphin · corydolphin/flask-cors | Medium4.3 |
| CVE-2025-0115 | PAN-OS: Authenticated Admin File Read Vulnerability in PAN-OS CLIPalo Alto Networks · PAN-OS | Medium6.8 |
| CVE-2025-21247 | MapUrlToZone Security Feature Bypass VulnerabilityMicrosoft · Windows 10 Version 1507 | Medium4.3 |
| CVE-2025-24470 | An Improper Resolution of Path Equivalence vulnerability [CWE-41] in FortiPortal 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.11 may allow a…Fortinet · FortiPortal | High8.1 |
| CVE-2025-21332 | MapUrlToZone Security Feature Bypass VulnerabilityMicrosoft · Windows 10 Version 1507 | Medium4.3 |
| CVE-2025-21189 | MapUrlToZone Security Feature Bypass VulnerabilityMicrosoft · Windows 10 Version 1507 | Medium4.3 |
| CVE-2025-21328 | MapUrlToZone Security Feature Bypass VulnerabilityMicrosoft · Windows 10 Version 1507 | Medium4.3 |
| CVE-2025-21329 | MapUrlToZone Security Feature Bypass VulnerabilityMicrosoft · Windows 10 Version 1507 | Medium4.3 |
| CVE-2025-21219 | MapUrlToZone Security Feature Bypass VulnerabilityMicrosoft · Windows 10 Version 1507 | Medium4.3 |
| CVE-2025-21269 | Windows HTML Platforms Security Feature Bypass VulnerabilityMicrosoft · Windows 10 Version 1507 | Medium4.3 |
| CVE-2025-21268 | MapUrlToZone Security Feature Bypass VulnerabilityMicrosoft · Windows 10 Version 1507 | Medium4.3 |
| CVE-2024-30073 | Windows Security Zone Mapping Security Feature Bypass VulnerabilityMicrosoft · Windows 10 Version 1507 | High7.8 |
| CVE-2024-45405 | gix-path improperly resolves configuration path reported by GitByron · gitoxide | Medium6.0 |
| CVE-2024-30036 | Windows Deployment Services Information Disclosure VulnerabilityMicrosoft · Windows Server 2019 | Medium6.5 |
| CVE-2023-46169 | IBM DS8900F file manipulationIBM · DS8900F | Medium6.5 |
| CVE-2023-36396 | Windows Compressed Folder Remote Code Execution VulnerabilityMicrosoft · Windows 11 version 22H2 | High7.8 |
| CVE-2022-0855 | Improper Resolution of Path Equivalence in microweber-dev/whmcs_pluginmicroweber-dev · microweber-dev/whmcs_plugin | High7.4 |