Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,451All CVEsplus 18,890 rejected
- 365Last 24 hours2,971 in the last 7 days
- 17,371Last 30 days1,592 of them critical
- 1,767Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 1 | 4 | 0 | 0 | 6 | 6 |
| Title | ||
|---|---|---|
| CVE-2026-96680 | ByteDance Coze Scraper Extension External Message index.js chrome.runtime.onMessageExternal.addListener authorizationByteDance · Coze Scraper Extension | Medium5.3 |
| CVE-2026-81735 | UI-TARS-desktop @agent-infra MCP Servers Bind Every Interface Without Authentication, Exposing Arbitrary Command Executionbytedance · UI-TARS-desktop | Critical10.0 |
| CVE-2026-11312 | bytedance InfiniStore KV Map infinistore.h purge_kv_map algorithmic complexitybytedance · InfiniStore | Medium4.8 |
| CVE-2026-7023 | ByteDance coze-studio databaseTool database_impl.go ExecuteSQL sql injectionByteDance · coze-studio | Medium5.3 |
| CVE-2026-6878 | ByteDance verl grader.py math_equal sandboxByteDance · verl | Medium6.3 |
| CVE-2026-40518 | ByteDance DeerFlow Path Traversal and Arbitrary File Write via Bootstrap Modebytedance · deer-flow | High7.1 |