Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,794All CVEsplus 19,141 rejected
- 584Last 24 hours3,088 in the last 7 days
- 17,116Last 30 days1,603 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 5 | 2 | 0 | 0 | 8 | 11 |
| 2025 | 0 | 0 | 1 | 0 | 0 | 1 | 3 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 2 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 2 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 2 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 2 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 | 2 |
| 2019 | 0 | 1 | 1 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-116652 | Tanium addressed a business logic error in Threat Response.Tanium · Threat Response | Medium4.3 |
| CVE-2026-68907 | libIEC61850: Server-side out-of-bounds stack read in association-specific dynamic dataset creation due to reversed StringUtils_copyStringToBuffer argumentsmz-automation · libiec61850 | High8.2 |
| CVE-2026-94636 | Apache Thrift: Python `TZlibTransport` stops enforcing its decompressed-size limit once the limit is exactly used upApache Software Foundation · Apache Thrift | High8.2 |
| CVE-2026-104430 | Zebra 4.5.0 Consensus Split via P2SH Sigop OvercountZcashFoundation · zebra | High8.7 |
| CVE-2026-19349 | Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2 state parameter stored as an SSO session in the GitHub and LinkedIn backendsLemonldap-NG-Portal | Critical9.8 |
| CVE-2026-43133 | KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulationLinux · Linux | High7.9 |
| CVE-2026-25634 | iccDEV memcpy-param-overlap in CIccTagMultiProcessElement::Apply()InternationalColorConsortium · iccDEV | High7.8 |
| CVE-2026-21503 | iccDEV has Undefined Behavior - Null Pointer Passed to memcpy() in CIccTagSparseMatrixArrayInternationalColorConsortium · iccDEV | Medium6.1 |
| CVE-2025-0325 | A Guard Tour VAPIX API parameter allowed the use of arbitrary values and can be incorrectly called, allowing an attacker to block access to the guard tour…Axis Communications AB · AXIS OS | Medium4.3 |
| CVE-2019-14844 | A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a Kerberos client could crash the KDC by sending one of the RFC 4556…MIT · krb5 | High7.5 |
| CVE-2019-7303 | Snapd seccomp filter TIOCSTI ioctl bypassCanonical · snapd | Medium5.7 |