Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,959All CVEsplus 19,141 rejected
- 194Last 24 hours3,182 in the last 7 days
- 16,878Last 30 days1,562 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 25 | 171 | 59 | 6 | 2 | 263 | 962 |
| 2025 | 5 | 96 | 19 | 1 | 0 | 121 | 699 |
| 2024 | 11 | 91 | 18 | 0 | 0 | 120 | 578 |
| 2023 | 5 | 37 | 19 | 0 | 0 | 61 | 458 |
| 2022 | 8 | 39 | 18 | 1 | 0 | 66 | 397 |
| 2021 | 16 | 44 | 13 | 3 | 0 | 76 | 331 |
| 2020 | 9 | 31 | 9 | 2 | 0 | 51 | 255 |
| 2019 | 16 | 24 | 12 | 0 | 0 | 52 | 204 |
| 2018 | 12 | 44 | 15 | 0 | 0 | 71 | 152 |
| 2017 | 12 | 24 | 12 | 0 | 0 | 48 | 81 |
| 2016 | 4 | 3 | 0 | 0 | 0 | 7 | 33 |
| 2015 | 0 | 2 | 0 | 0 | 0 | 2 | 26 |
| 2014 | 0 | 5 | 0 | 0 | 0 | 5 | 24 |
| 2013 | 0 | 0 | 0 | 0 | 0 | 0 | 19 |
| 2012 | 0 | 0 | 0 | 0 | 0 | 0 | 19 |
| 2011 | 0 | 2 | 1 | 0 | 0 | 3 | 19 |
| 2010 | 0 | 3 | 0 | 0 | 0 | 3 | 16 |
| 2009 | 0 | 1 | 0 | 0 | 0 | 1 | 13 |
| 2008 | 0 | 0 | 1 | 0 | 0 | 1 | 12 |
| 2007 | 0 | 1 | 0 | 0 | 0 | 1 | 11 |
| 2006 | 0 | 1 | 0 | 0 | 0 | 1 | 10 |
| 2005 | 1 | 1 | 0 | 0 | 0 | 2 | 9 |
| 2004 | 1 | 3 | 1 | 0 | 0 | 5 | 7 |
| 2003 | 1 | 0 | 0 | 0 | 0 | 1 | 2 |
| 2002 | 1 | 0 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-68993 | A double free vulnerability in NPU driver due to improper pointer management (940)Samsung Semiconductor · Exynos 1480 | Not scored |
| CVE-2026-68994 | A double free vulnerability in NPU driver due to improper pointer management (941)Samsung Semiconductor · Exynos 1480 | Not scored |
| CVE-2026-121956 | FreeRDP before 3.32.2 Double Free in WinPR Kerberos retrieveSomeTgtPublic exploitFreeRDP · FreeRDP | High8.7 |
| CVE-2026-92211 | Pixar Animation Studio OpenUSD Crate File Parsing Double Free Remote Code Execution VulnerabilityPixar Animation Studio · OpenUSD | High7.8 |
| CVE-2026-121507 | Double Free in µD3TND3TN GmbH · µD3TN | Medium5.9 |
| CVE-2026-58968 | In oapvd_vlc_metadata of oapv_vlc.c, there is a possible memory corruption due to a double free. This could lead to remote escalation of privilege with no…Google · Android | Critical9.8 |
| CVE-2026-20582 | In usb, there is a possible memory corruption due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained…MediaTek, Inc. · MediaTek chipset | Medium6.7 |
| CVE-2026-20573 | In afe, there is a possible memory corruption due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained…MediaTek, Inc. · MediaTek chipset | Medium6.7 |
| CVE-2026-119338 | Tesseract: Double free and use after free in the PAGE XML renderer on right-to-left pagesPublic exploittesseract-ocr · tesseract | Medium6.9 |
| CVE-2026-119116 | Use-after-free in the SetClient command handler of kmstool-enclave in AWS aws-nitro-enclaves-sdk-cAWS · kmstool-enclave | High8.7 |
| CVE-2026-85890 | Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityMicrosoft · Microsoft Edge (Chromium-based) | High8.8 |
| CVE-2026-83831 | Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityMicrosoft · Microsoft Edge (Chromium-based) | High8.8 |
| CVE-2026-88812 | X.Org Server XKB SetGeometry TextDoodad Double FreeX.org · xorg-x11-server | High7.8 |
| CVE-2026-117943 | Use-after-free in the DOM: Core & HTML componentMozilla · Firefox | High8.8 |
| CVE-2026-116743 | libyal libmsiecf through 20260525 Double Free via libmsiecf_url_values_read_dataPublic exploitlibyal · libmsiecf | Medium6.8 |
| CVE-2026-112457 | A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An…Apple · macOS | High7.1 |
| CVE-2026-112410 | A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A…Apple · macOS | High7.5 |
| CVE-2026-116260 | libimobiledevice AFC Service afc.c service_receive double freePublic exploitlibimobiledevice | Medium6.9 |
| CVE-2026-78116 | Double free of an RTIO submission in the Broadcom AFBR-S50 sensor driver data-evaluation error pathzephyrproject · zephyr | Medium5.2 |
| CVE-2026-94300 | Concurrent GSS-TSIG messages corrupt memoryISC · BIND 9 | High8.1 |
| CVE-2026-86962 | A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27,…Apple · iOS and iPadOS | Medium5.5 |
| CVE-2026-112036 | Artifex MuPDF Signature Locking pdf-xref.c free_char_list double freePublic exploitArtifex · MuPDF | Medium5.3 |
| CVE-2026-57446 | libIEC61850: Server-side double free in MMS ObtainFile task reuse due to stale FILE* handlePublic exploitmz-automation · libiec61850 | Medium5.3 |
| CVE-2026-110599 | L-SMASH through 2.14.5 Double Free in HEVC and H.264 Importer ProbePublic exploitl-smash · l-smash | Medium6.9 |
| CVE-2026-94370 | Memory corruption (double free / use-after-free) vulnerability in core string handling impacts Qt for MCUsqt · Qt_for_MCUs | Medium6.5 |
| CVE-2026-95635 | Photoshop Desktop | Double Free (CWE-415)Adobe · Photoshop | High7.8 |
| CVE-2026-108132 | Windows Kerberos Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1607 | High7.0 |
| CVE-2026-97830 | Windows Internet Information Services Denial of Service VulnerabilityMicrosoft · Windows 11 version 23H2 | High7.5 |
| CVE-2026-97812 | Windows Update Orchestrator Service Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 21H2 | High7.0 |
| CVE-2026-97811 | Microsoft OpenSSH for Windows Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 | High7.8 |
| CVE-2026-97772 | Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft · Microsoft 365 Apps for Enterprise | High8.8 |
| CVE-2026-95943 | Connected Devices Platform Service (Cdpsvc) Elevation of Privilege VulnerabilityMicrosoft · Windows 11 version 23H2 | High7.0 |
| CVE-2026-70158 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1607 | High8.8 |
| CVE-2026-88171 | Windows DHCP Server Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1607 | High8.1 |
| CVE-2026-88149 | Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1607 | High7.0 |
| CVE-2026-83634 | Windows BitLocker Elevation of Privilege VulnerabilityMicrosoft · Windows 11 version 23H2 | High7.8 |
| CVE-2026-97767 | Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft · Microsoft 365 Apps for Enterprise | High8.8 |
| CVE-2026-97749 | Microsoft Office Outlook Remote Code Execution VulnerabilityMicrosoft · Microsoft 365 Apps for Enterprise | Critical9.8 |
| CVE-2026-96864 | Microsoft Failover Cluster Virtual Driver Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1607 | Critical9.8 |
| CVE-2026-88071 | Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft · Windows 11 version 23H2 | High7.8 |
| CVE-2026-85936 | Windows Shell Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1607 | High8.8 |
| CVE-2026-85904 | Windows Device Association Service Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1607 | High7.0 |
| CVE-2026-85829 | Windows Wired AutoConfig Service Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1607 | High7.8 |
| CVE-2026-84012 | Windows Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1607 | High8.1 |
| CVE-2026-83916 | Windows Error Reporting Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1607 | High7.0 |
| CVE-2026-83842 | Windows TCP/IP Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1607 | High7.0 |
| CVE-2026-70062 | Windows libarchive Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1809 | High8.1 |
| CVE-2026-106175 | A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.8, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0…Fortinet · FortiOS | Low2.1 |
| CVE-2026-104192 | DragonflyDB stream RDB deserialization double-freedragonflydb · dragonfly | Critical9.6 |
| CVE-2026-109943 | FreeRDP 3.29.0 before 3.32.0 Double Free via Async-Update Polygon OrderPublic exploitFreeRDP · FreeRDP | High7.1 |