Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,728All CVEsplus 19,114 rejected
- 441Last 24 hours2,857 in the last 7 days
- 17,146Last 30 days1,582 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per day
In the last 90 days, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 5 Nov 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 18,365 |
| 4 Nov 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 18,365 |
| 3 Nov 2026 | 0 | 3 | 0 | 0 | 16 | 19 | 18,365 |
| 2 Nov 2026 | 0 | 10 | 0 | 0 | 15 | 25 | 18,346 |
| 1 Nov 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 18,321 |
| 31 Oct 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 18,321 |
| 30 Oct 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 18,321 |
| 29 Oct 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 18,321 |
| 28 Oct 2026 | 2 | 27 | 0 | 0 | 88 | 117 | 18,321 |
| 27 Oct 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 18,204 |
| 26 Oct 2026 | 0 | 2 | 0 | 0 | 10 | 12 | 18,204 |
| 25 Oct 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 18,192 |
| 24 Oct 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 18,192 |
| 23 Oct 2026 | 3 | 50 | 0 | 0 | 164 | 217 | 18,192 |
| 22 Oct 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 17,975 |
| 21 Oct 2026 | 0 | 2 | 0 | 0 | 0 | 2 | 17,975 |
| 20 Oct 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 17,973 |
| 19 Oct 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 17,973 |
| 18 Oct 2026 | 4 | 31 | 0 | 0 | 400 | 435 | 17,973 |
| 17 Oct 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 17,538 |
| 16 Oct 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 17,538 |
| 15 Oct 2026 | 2 | 0 | 0 | 0 | 0 | 2 | 17,538 |
| 14 Oct 2026 | 0 | 3 | 0 | 0 | 43 | 46 | 17,536 |
| 13 Oct 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 17,490 |
| 12 Oct 2026 | 0 | 1 | 0 | 0 | 0 | 1 | 17,490 |
| 11 Oct 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 17,489 |
| 10 Oct 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 17,489 |
| 9 Oct 2026 | 0 | 5 | 0 | 0 | 5 | 10 | 17,489 |
| 8 Oct 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 17,479 |
| 7 Oct 2026 | 0 | 1 | 0 | 0 | 1 | 2 | 17,479 |
| 6 Oct 2026 | 2 | 50 | 0 | 0 | 155 | 207 | 17,477 |
| 5 Oct 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 17,270 |
| 4 Oct 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 17,270 |
| 3 Oct 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 17,270 |
| 2 Oct 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 17,270 |
| 1 Oct 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 17,270 |
| 30 Sept 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 17,270 |
| 29 Sept 2026 | 0 | 1 | 0 | 0 | 0 | 1 | 17,270 |
| 28 Sept 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 17,269 |
| 27 Sept 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 17,269 |
| 26 Sept 2026 | 0 | 1 | 0 | 0 | 0 | 1 | 17,269 |
| 25 Sept 2026 | 1 | 76 | 64 | 0 | 230 | 371 | 17,268 |
| 24 Sept 2026 | 3 | 58 | 0 | 0 | 173 | 234 | 16,897 |
| 23 Sept 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 16,663 |
| 22 Sept 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 16,663 |
| 21 Sept 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 16,663 |
| 20 Sept 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 16,663 |
| 19 Sept 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 16,663 |
| 18 Sept 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 16,663 |
| 17 Sept 2026 | 9 | 157 | 0 | 0 | 432 | 598 | 16,663 |
| 16 Sept 2026 | 26 | 126 | 0 | 0 | 124 | 276 | 16,065 |
| 15 Sept 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 15,789 |
| 14 Sept 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 15,789 |
| 13 Sept 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 15,789 |
| 12 Sept 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 15,789 |
| 11 Sept 2026 | 71 | 205 | 0 | 0 | 152 | 428 | 15,789 |
| 10 Sept 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 15,361 |
| 9 Sept 2026 | 0 | 3 | 0 | 0 | 9 | 12 | 15,361 |
| 8 Sept 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 15,349 |
| 7 Sept 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 15,349 |
| 6 Sept 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 15,349 |
| 5 Sept 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 15,349 |
| 4 Sept 2026 | 0 | 0 | 0 | 0 | 155 | 155 | 15,349 |
| 3 Sept 2026 | 0 | 17 | 0 | 0 | 14 | 31 | 15,194 |
| 2 Sept 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 15,163 |
| 1 Sept 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 15,163 |
| 31 Aug 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 15,163 |
| 30 Aug 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 15,163 |
| 29 Aug 2026 | 1 | 0 | 0 | 0 | 0 | 1 | 15,163 |
| 28 Aug 2026 | 17 | 58 | 0 | 0 | 60 | 135 | 15,162 |
| 27 Aug 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 15,027 |
| 26 Aug 2026 | 17 | 50 | 0 | 0 | 25 | 92 | 15,027 |
| 25 Aug 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 14,935 |
| 24 Aug 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 14,935 |
| 23 Aug 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 14,935 |
| 22 Aug 2026 | 20 | 79 | 0 | 0 | 50 | 149 | 14,935 |
| 21 Aug 2026 | 1 | 3 | 0 | 0 | 0 | 4 | 14,786 |
| 20 Aug 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 14,782 |
| 19 Aug 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 14,782 |
| 18 Aug 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 14,782 |
| 17 Aug 2026 | 0 | 1 | 0 | 0 | 0 | 1 | 14,782 |
| 16 Aug 2026 | 0 | 1 | 0 | 0 | 0 | 1 | 14,781 |
| 15 Aug 2026 | 129 | 379 | 0 | 0 | 336 | 844 | 14,780 |
| 14 Aug 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 13,936 |
| 13 Aug 2026 | 0 | 4 | 0 | 0 | 0 | 4 | 13,936 |
| 12 Aug 2026 | 1 | 7 | 0 | 0 | 14 | 22 | 13,932 |
| 11 Aug 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 13,910 |
| 10 Aug 2026 | 22 | 135 | 0 | 0 | 187 | 344 | 13,910 |
| 9 Aug 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 13,566 |
| 8 Aug 2026 | 1 | 0 | 0 | 0 | 1 | 2 | 13,566 |
| 7 Aug 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 13,564 |
| Title | ||
|---|---|---|
| CVE-2026-99270 | tcp: Fix potential UAF in reqsk_timer_handler().Linux · Linux | High8.1 |
| CVE-2026-99269 | sched_ext: Wait for SCX_OPSS_DISPATCHING before moving tasks off DSQsLinux · Linux | High7.8 |
| CVE-2026-99261 | drm/amdgpu: correct reservation fence slots for userq per-vm BOs evictionLinux · Linux | Not scored |
| CVE-2026-99260 | ntfs: fix resident conversion in ntfs_new_attr_flagsLinux · Linux | Not scored |
| CVE-2026-99259 | soc/tegra: pmc: Fix uninitialised clock rateLinux · Linux | Not scored |
| CVE-2026-99258 | x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index()Linux · Linux | Not scored |
| CVE-2026-99257 | gpio: shared: gracefully handle no-device lookup of shared GPIOsLinux · Linux | Not scored |
| CVE-2026-99256 | dm cache: fix issue with background work lockingLinux · Linux | Not scored |
| CVE-2026-99255 | io_uring/io-wq: don't hide a link from cancellationsLinux · Linux | Not scored |
| CVE-2026-99254 | io_uring: don't flood a cancelling task with task_workLinux · Linux | Not scored |
| CVE-2026-99253 | io_uring/cancel: rearm local work wake up before sleepLinux · Linux | Not scored |
| CVE-2026-99251 | Drivers: hv: Avoid infinite retry loop in init_vp_index()Linux · Linux | Not scored |
| CVE-2026-99250 | printk: Postpone kthread startupLinux · Linux | Not scored |
| CVE-2026-99249 | pid_namespace: make zap_pid_ns_processes() freezableLinux · Linux | Not scored |
| CVE-2026-99248 | i2c: xiic: restore non-managed runtime PM to fix clk WARN floodLinux · Linux | Not scored |
| CVE-2026-99247 | tracing: Do not initialize tracefs work if tracing is disabledLinux · Linux | Not scored |
| CVE-2026-99246 | tipc: protect node reset trace dump with node lockLinux · Linux | High8.1 |
| CVE-2026-99245 | KEYS: Fix key_reject_and_link() race with keyring restrictionLinux · Linux | Not scored |
| CVE-2026-99244 | pid_namespace: prevent TIF_NOTIFY_SIGNAL from interrupting the reaperLinux · Linux | Not scored |
| CVE-2026-99242 | ntfs: fix race between fallocate and mmap readsLinux · Linux | Not scored |
| CVE-2026-99241 | ntfs: take invalidate_lock in ntfs_filemap_page_mkwrite()Linux · Linux | Not scored |
| CVE-2026-99240 | mm/damon/core: error damos_commit_quota_goal() for zero target_valueLinux · Linux | Not scored |
| CVE-2026-99239 | Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has connLinux · Linux | High7.8 |
| CVE-2026-99238 | tracing: Hold trace_types_lock when updating modules in persistent instancesLinux · Linux | High7.8 |
| CVE-2026-99237 | tracing: Hold trace_types_lock when resetting last boot data from readersLinux · Linux | High7.8 |
| CVE-2026-99236 | tracing: Reject incomplete event filter expressionsLinux · Linux | High7.8 |
| CVE-2026-99235 | tracing: Save the event file instead of the compatible histogramLinux · Linux | High7.8 |
| CVE-2026-99234 | tracing: Unregister field variable histograms when the command failsLinux · Linux | Not scored |
| CVE-2026-99233 | tracing/histograms: Verify event_call identity when updating synth_event refcountLinux · Linux | High7.8 |
| CVE-2026-99232 | tracing/syscalls: Use copy_from_user for the faultable syscall bufferLinux · Linux | Not scored |
| CVE-2026-99231 | io_uring/waitid: own the request before clearing ->headLinux · Linux | High7.8 |
| CVE-2026-99230 | io_uring/cmd: don't leave list poison in ->hash_nodeLinux · Linux | Not scored |
| CVE-2026-99229 | io_uring/wait: don't spin on a stuck overflow listLinux · Linux | Not scored |
| CVE-2026-99228 | io_uring/io-wq: don't lose the signal that ends workLinux · Linux | Not scored |
| CVE-2026-99227 | io_uring/waitid: prevent cancel reference wrapLinux · Linux | High7.8 |
| CVE-2026-99226 | keys: Avoid the owner account dereference in named keyring lookupLinux · Linux | Not scored |
| CVE-2026-99225 | keys: Check the authorization payload in process keyring searchesLinux · Linux | Not scored |
| CVE-2026-99224 | keys: Protect the type name while describing a keyLinux · Linux | High7.0 |
| CVE-2026-99223 | keys: make keyring indexes independent of kernel addressesLinux · Linux | Not scored |
| CVE-2026-99222 | keys: Protect the read method check against type removalLinux · Linux | Not scored |
| CVE-2026-99221 | keys/trusted_keys: return immediately after TPM unseal failureLinux · Linux | Not scored |
| CVE-2026-99220 | asymmetric_keys: reject trust keys without IDsLinux · Linux | Not scored |
| CVE-2026-99219 | ftrace: Initialize modname and offset in print_rec()Linux · Linux | Not scored |
| CVE-2026-99218 | coredump: hold RCU while releasing parked threadsLinux · Linux | High7.0 |
| CVE-2026-99216 | Drivers: hv: Don't reset VMBus connection state on error/exit pathsLinux · Linux | High8.4 |
| CVE-2026-99215 | power: supply: core: prevent unregistering a power supply while a callback runsLinux · Linux | Not scored |
| CVE-2026-99214 | drm/vc4: hdmi: Move packet RAM enable to PM runtimeLinux · Linux | Not scored |
| CVE-2026-99213 | vsock: treat TCP_CLOSING as once-establishedLinux · Linux | High7.8 |
| CVE-2026-99212 | net/rds: don't let the rdma_cm destroy an id RDS still owns on route failureLinux · Linux | High7.0 |
| CVE-2026-99211 | netlink: reset skb headers before unicast and multicast filteringLinux · Linux | Not scored |