Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,644All CVEsplus 19,141 rejected
- 674Last 24 hours2,957 in the last 7 days
- 17,129Last 30 days1,607 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 6 | 2 | 0 | 0 | 8 | 19 |
| 2025 | 0 | 4 | 1 | 0 | 0 | 5 | 11 |
| 2024 | 0 | 0 | 2 | 0 | 0 | 2 | 6 |
| 2023 | 0 | 1 | 0 | 0 | 0 | 1 | 4 |
| 2022 | 0 | 1 | 1 | 0 | 0 | 2 | 3 |
| 2021 | 0 | 1 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-85864 | Python Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1607 | High7.8 |
| CVE-2026-20282 | Cisco Identity Services Engine Authenticated Write VulnerabilityCisco · Cisco Identity Services Engine Software | Medium4.9 |
| CVE-2026-46581 | In Eclipse Mojarra versions 2.3 and following, URL handing in `DefaultFaceletFactory` does not properly sanitize and/or block remote URLs, allowing an attacker…Eclipse Foundation · Eclipse Mojarra | High7.5 |
| CVE-2026-50510 | GitHub Copilot Remote Code Execution VulnerabilityMicrosoft · GitHub Copilot Plugin for JetBrains IDEs | High7.8 |
| CVE-2026-50023 | yt-dlp: Dangerous file type creation via insufficient filename sanitization (Bypass of CVE-2024-38519)yt-dlp · yt-dlp | High8.3 |
| CVE-2026-27140 | Code execution vulnerability in SWIG code generation in cmd/goGo toolchain · cmd/go | High8.8 |
| CVE-2019-25623 | Luminance Studio 2.17 Denial of Service via Malformed InputPixarra · Luminance Studio | Medium6.9 |
| CVE-2026-25177 | Active Directory Domain Services Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1607 | High8.8 |
| CVE-2025-47173 | Microsoft Office Remote Code Execution VulnerabilityMicrosoft · Microsoft 365 Apps for Enterprise | High7.8 |
| CVE-2025-47953 | Microsoft Office Remote Code Execution VulnerabilityMicrosoft · Microsoft 365 Apps for Enterprise | High8.4 |
| CVE-2024-47260 | 51l3nc3, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API mediaclip.cgi did not have a sufficient input validation allowing for uploading…Axis Communications AB · AXIS OS | Medium6.5 |
| CVE-2025-21402 | Microsoft Office OneNote Remote Code Execution VulnerabilityMicrosoft · Microsoft Office LTSC for Mac 2021 | High7.8 |
| CVE-2025-21361 | Microsoft Outlook Remote Code Execution VulnerabilityMicrosoft · Microsoft Office LTSC for Mac 2021 | High7.8 |
| CVE-2024-45312 | Arbitrary language parameter can passed to `aspell` executable via spelling requests in overleafoverleaf · overleaf | Medium5.3 |
| CVE-2024-30063 | Windows Distributed File System (DFS) Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1507 | Medium6.7 |
| CVE-2023-0046 | Improper Restriction of Names for Files and Other Resources in lirantal/daloradiuslirantal · lirantal/daloradius | High7.2 |
| CVE-2022-23536 | Alertmanager can expose local files content via specially crafted configcortexproject · cortex | Medium6.5 |
| CVE-2022-36302 | File path manipulation vulnerability in BF-OS version 3.00 up to and including 3.83 allows an attacker to modify the file path to access different resources,…Bosch · BF-OS | High8.8 |
| CVE-2021-41146 | Arbitrary command execution on Windows in qutebrowserqutebrowser · qutebrowser | High8.8 |