Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 2 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,244All CVEsplus 18,875 rejected
- 808Last 24 hours3,091 in the last 7 days
- 17,420Last 30 days1,568 of them critical
- 1,767Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 33 | 30 | 0 | 1 | 64 | 76 |
| 2025 | 0 | 1 | 7 | 3 | 0 | 11 | 12 |
| 2024 | 0 | 0 | 1 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-113681 | OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3.2.0.3-beta1 Cineon Reader Heap Out-of-Bounds ReadAcademySoftwareFoundation · OpenImageIO | Medium6.8 |
| CVE-2026-65969 | OpenImageIO: TGA-to-GIF palette split signed overflow causes SIGSEGVAcademySoftwareFoundation · OpenImageIO | Medium5.5 |
| CVE-2026-67549 | OpenImageIO: TIFF 1-bit CMYK bit conversion heap out-of-bounds writeAcademySoftwareFoundation · OpenImageIO | High7.6 |
| CVE-2026-63638 | OpenImageIO: Cineon invalid bit depth heap out-of-bounds writeAcademySoftwareFoundation · OpenImageIO | High8.3 |
| CVE-2026-63419 | OpenImageIO: IFF ZBUFFER tile read writes past caller tile bufferAcademySoftwareFoundation · OpenImageIO | High7.8 |
| CVE-2026-65970 | OpenImageIO: TIFF multithreaded scanline read use-after-scope in `TIFFInput::read_native_scanlines`AcademySoftwareFoundation · OpenImageIO | Medium5.3 |
| CVE-2026-63635 | OpenImageIO: PSD RawColor invalid color mode causes global out-of-bounds read and allocation DoSAcademySoftwareFoundation · OpenImageIO | Medium5.5 |
| CVE-2026-63422 | OpenImageIO OpenEXR plugin partial edge tile heap out-of-bounds writeAcademySoftwareFoundation · OpenImageIO | High7.8 |
| CVE-2026-63420 | OpenImageIO: PSD RawColor indexed image out-of-bounds read in `interleave_row`AcademySoftwareFoundation · OpenImageIO | Medium5.5 |
| CVE-2026-59181 | OpenImageIO: Stack buffer overflow in OpenImageIO Cineon reader via unchecked numberOfElementsAcademySoftwareFoundation · OpenImageIO | Medium6.1 |
| CVE-2026-59156 | OpenImageIO: Unbounded recursion in FITS header parser leads to stack overflowAcademySoftwareFoundation · OpenImageIO | Medium6.5 |
| CVE-2026-59956 | OpenImageIO: Heap-buffer-overread in IffInput::readimg() when ZBUFFER flag is setAcademySoftwareFoundation · OpenImageIO | Medium6.1 |
| CVE-2026-50291 | OpenImageIO: Segmentation Fault in BmpInput::read_native_scanline (bmpinput.cpp:399)AcademySoftwareFoundation · OpenImageIO | Medium5.5 |
| CVE-2026-59981 | OpenEXR: Heap OOB read in SampleCountChannel row when using nonzero dataWindowAcademySoftwareFoundation · openexr | High7.1 |
| CVE-2026-68514 | OpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collision in deep imagesAcademySoftwareFoundation · openexr | Medium5.5 |
| CVE-2026-68515 | OpenEXR: Heap out-of-bounds write in exrmultiview with subsampled channel unionAcademySoftwareFoundation · openexr | High7.1 |
| CVE-2026-68513 | OpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collisionAcademySoftwareFoundation · openexr | High7.1 |
| CVE-2026-65979 | OpenEXR: Out-of-bounds read in HTJ2K decoder from unvalidated chunk header length (PLEN)AcademySoftwareFoundation · openexr | Medium6.7 |
| CVE-2026-62986 | OpenEXR: PyOpenEXR deep prefixed RGB stale lane disclosureAcademySoftwareFoundation · openexr | Medium4.3 |
| CVE-2026-61555 | OpenEXR: Empty multiView viewFromChannelName file crashAcademySoftwareFoundation · openexr | Medium5.5 |
| CVE-2026-59985 | OpenEXR: Heap out-of-bounds read in OpenEXRCore RLE decoding on ILP32AcademySoftwareFoundation · openexr | Medium5.5 |
| CVE-2026-59984 | OpenEXR: Scratch buffer overflow decoding B44-compressed InputFile on ILP32AcademySoftwareFoundation · openexr | Medium5.5 |
| CVE-2026-59983 | OpenEXR: Out-of-bounds read in DeepTiledInputFile sample-count table decode on ILP32AcademySoftwareFoundation · openexr | Medium5.5 |
| CVE-2026-59982 | OpenEXR: DWAA InputFile AC buffer overflow on ILP32 platformsAcademySoftwareFoundation · openexr | High7.1 |
| CVE-2026-59189 | OpenEXR: Out-of-bounds read in DeepImageChannel::row() for non-zero dataWindow originAcademySoftwareFoundation · openexr | High7.1 |
| CVE-2026-59187 | OpenEXR: exrmetrics deep pixelmode heap buffer overflowAcademySoftwareFoundation · openexr | High7.1 |
| CVE-2026-59186 | OpenEXR: Heap out-of-bounds write in TiledRgbaInputFile via integer overflow on 32-bit (ILP32) buildsAcademySoftwareFoundation · openexr | High7.1 |
| CVE-2026-59184 | OpenEXR: OpenEXRUtil FlatImageChannel row nonzero dataWindow heap OOB writeAcademySoftwareFoundation · openexr | High7.1 |
| CVE-2026-59183 | OpenEXR: Signed Integer Overflow Leading to Out-of-Bounds Memory Access in Deep Tile DecodingAcademySoftwareFoundation · openexr | Medium5.5 |
| CVE-2026-55373 | OpenEXR: OpenEXRUtil SampleCountChannel endEdit() can loop forever on UINT_MAX sample countsAcademySoftwareFoundation · openexr | Medium6.2 |
| CVE-2026-55371 | OpenEXR: OpenEXRCore exr_attr_set_bytes() accepts NULL type_hint with positive hint_lengthAcademySoftwareFoundation · openexr | Medium6.9 |
| CVE-2026-55059 | OpenEXR: OpenEXRUtil SampleCountChannel row setter heap has an out-of-bounds write vulnerabilityAcademySoftwareFoundation · openexr | Medium6.1 |
| CVE-2026-54920 | OpenEXR: Integer overflow and uninitialized pointer cause invalid delete in OpenEXRUtil image resizeAcademySoftwareFoundation · openexr | None0.0 |
| CVE-2026-53532 | OpenEXR: Unhandled assert abort in HTJ2K decoder via crafted QCD marker (DoS)AcademySoftwareFoundation · openexr | High7.1 |
| CVE-2026-68516 | OpenEXR: HTJ2K SIZ image-offset gap stack buffer overflowAcademySoftwareFoundation · openexr | Medium6.5 |
| CVE-2026-42450 | OpenColorIO vulnerable to stack buffer overflow via unbounded `sscanf %s` in Spi3D (.spi3d) LUT parserAcademySoftwareFoundation · OpenColorIO | High8.4 |
| CVE-2026-45696 | OpenEXR HTJ2K decoder heap buffer over-read in ht_undo_impl() (DoS)AcademySoftwareFoundation · openexr | High8.3 |
| CVE-2026-44663 | OpenEXR: Integer overflow in the HTJ2K decoder leads to heap-buffer-overflowAcademySoftwareFoundation · openexr | Medium6.1 |
| CVE-2026-43903 | OpenImageIO: SGI RLE decoder heap buffer overflow OIIO_DASSERT bounds checks are no-ops in release buildsAcademySoftwareFoundation · OpenImageIO | High8.4 |
| CVE-2026-43904 | OpenImageIO: Softimage PIC RLE decoder heap buffer overflow — longCount not clamped to image widthAcademySoftwareFoundation · OpenImageIO | High8.4 |
| CVE-2026-43905 | OpenImageIO: JPEG2000 (OpenJPH) signed integer overflow in buffer allocationAcademySoftwareFoundation · OpenImageIO | High7.1 |
| CVE-2026-43996 | OpenImageIO: Integer wraparound in bounds check of decode_pixel leads to out-of-bounds read in TGA paletted image decoderAcademySoftwareFoundation · OpenImageIO | Medium5.5 |
| CVE-2026-43907 | OpenImageIO: Integer overflow in QueryRGBBufferSizeInternal leads to heap out-of-bounds write in DPX decoder (kCbYCr and kABGR)AcademySoftwareFoundation · OpenImageIO | High8.3 |
| CVE-2026-43908 | OpenImageIO: Signed integer overflow in ConvertCbYCrYToRGB leads to heap out-of-bounds write in DPX 4:2:2 decoderAcademySoftwareFoundation · OpenImageIO | High8.8 |
| CVE-2026-43909 | OpenImageIO: Signed integer overflow in SwapRGBABytes loop index leads to out-of-bounds read/write in DPX ABGR decoderAcademySoftwareFoundation · OpenImageIO | High8.8 |
| CVE-2026-43906 | OpenImageIO: HEIF Heap overflowAcademySoftwareFoundation · OpenImageIO | High8.5 |
| CVE-2026-42217 | OpenEXR: Shift exponent overflow in `readVariableLengthInteger()` (`ImfIDManifest.cpp`)AcademySoftwareFoundation · openexr | Medium6.3 |
| CVE-2026-42216 | OpenEXR: Out-of-bounds read in `IDManifest::init()` during prefix expansionAcademySoftwareFoundation · openexr | High8.8 |
| CVE-2026-41142 | OpenEXR is Vulnerable to Integer overflow in ImageChannel::resize leads to heap OOB write via OpenEXRUtil public APIAcademySoftwareFoundation · openexr | High8.8 |
| CVE-2026-7582 | AcademySoftwareFoundation OpenImageIO DDS Image ddsinput.cpp out-of-bounds writeAcademySoftwareFoundation · OpenImageIO | Medium4.8 |