Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,644All CVEsplus 19,141 rejected
- 674Last 24 hours2,957 in the last 7 days
- 17,129Last 30 days1,607 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 4 | 2 | 1 | 0 | 7 | 14 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 7 |
| 2024 | 0 | 4 | 2 | 0 | 0 | 6 | 7 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2021 | 0 | 0 | 1 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-50719 | The Ingenic T41, and probably also T32, T40, and A1 SoC boot ROMs parse and execute an attacker-controlled init table from the SPL header before checking the… | Medium6.8 |
| CVE-2026-39894 | Cacti: RRDtool metric shift via LC_NUMERIC locale comma decimal formattingCacti · cacti | Low2.9 |
| CVE-2026-11102 | Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox…Google · Chrome | High8.8 |
| CVE-2026-11097 | Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted…Google · Chrome | Medium6.5 |
| CVE-2026-25960 | SSRF Protection Bypass in vLLMvllm-project · vllm | High7.1 |
| CVE-2026-24010 | Horilla has HTML Injection Issue that, with Phishing, Leads to Account Takeoverhorilla-opensource · horilla | High8.8 |
| CVE-2026-0902 | Inappropriate implementation in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML…Google · Chrome | High8.8 |
| CVE-2024-7001 | Inappropriate implementation in HTML in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures…Google · Chrome | Medium4.3 |
| CVE-2024-5839 | Inappropriate Implementation in Memory Allocator in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a…Google · Chrome | High8.8 |
| CVE-2024-5836 | Inappropriate Implementation in DevTools in Google Chrome prior to 126.0.6478.54 allowed an attacker who convinced a user to install a malicious extension to…Google · Chrome | High8.8 |
| CVE-2024-1694 | Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to bypass discretionary access control via a…Google · Omaha | High7.8 |
| CVE-2024-2628 | Inappropriate implementation in Downloads in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform UI spoofing via a crafted URL. (Chromium…Google · Chrome | Medium4.3 |
| CVE-2024-1672 | Inappropriate implementation in Content Security Policy in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via…Google · Chrome | High8.8 |
| CVE-2021-0294 | Junos OS: QFX5000 Series and EX4600 Series: Enhanced storm control might not work leading to partial Denial of ServiceJuniper Networks · Junos OS | Medium5.3 |