Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read just now.
At a glance
Published CVEs; rejected ones are not counted.
- 400,180All CVEsplus 18,875 rejected
- 807Last 24 hours3,229 in the last 7 days
- 17,387Last 30 days1,564 of them critical
- 1,767Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 26 | 20 | 3 | 0 | 50 | 60 |
| 2025 | 0 | 5 | 4 | 0 | 0 | 9 | 10 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2022 | 1 | 0 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-120247 | FFmpeg 2.3 through 9.0.2 Huffyuv Decoder Uninitialized Heap Memory DisclosureFFmpeg · FFmpeg | Medium6.8 |
| CVE-2026-120246 | FFmpeg 4.4 through 9.0.2 Uninitialized Memory Disclosure via CDXL HAM DecoderFFmpeg · FFmpeg | Medium6.8 |
| CVE-2026-120245 | FFmpeg 0.10 through 9.0.2 Uninitialized Memory Disclosure via Sun Raster DecoderFFmpeg · FFmpeg | Medium6.8 |
| CVE-2026-120244 | FFmpeg 2.1 through 9.0.2 Uninitialized Memory Leak via PCX DecoderFFmpeg · FFmpeg | Medium6.8 |
| CVE-2026-120243 | FFmpeg 2.0 through 9.0.2 Information Disclosure via G2M Kempf PaletteFFmpeg · FFmpeg | Medium6.8 |
| CVE-2026-120210 | FFmpeg 5.0 through 9.0.2 Path Traversal via IMF Demuxer ASSETMAP PathFFmpeg · FFmpeg | Medium5.3 |
| CVE-2026-107698 | FFmpeg before 7.1.4 and 8.0.2 SSRF via RTSP Redirect HandlingFFmpeg · FFmpeg | Medium5.3 |
| CVE-2026-107697 | FFmpeg before 8.1.3 HLS Demuxer Security Check Bypass via parse_playlist()FFmpeg · FFmpeg | Medium5.3 |
| CVE-2026-107696 | FFmpeg through 9.0.2 Infinite Loop via RTSP Redirect Handling in rtsp.cFFmpeg · FFmpeg | High7.1 |
| CVE-2026-107695 | FFmpeg before 8.1.3 HLS Demuxer Infinite Loop via Self-Referencing PlaylistFFmpeg · FFmpeg | High7.1 |
| CVE-2026-107678 | FFmpeg through 9.0.2 Stack Exhaustion via Recursive Free of pssh BoxesFFmpeg · FFmpeg | Medium5.7 |
| CVE-2026-107677 | FFmpeg through 9.0.2 DASH Demuxer Infinite Loop via Empty SegmentTemplate MediaFFmpeg · FFmpeg | Medium5.7 |
| CVE-2026-107676 | FFmpeg through 9.0.2 Uninitialized Memory Disclosure via HDR10+ Metadata SerializerFFmpeg · FFmpeg | Medium4.8 |
| CVE-2026-107675 | FFmpeg through 9.0.2 Missing SSH Host Key Verification in sftp ProtocolFFmpeg · FFmpeg | Medium6.0 |
| CVE-2026-107660 | FFmpeg before 8.1.3 and 9.x before 9.0.2 mbedTLS Hostname Verification Bypass for IP HostsFFmpeg · FFmpeg | Medium6.3 |
| CVE-2026-96611 | FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In mov_read_ispe(), uint32_t width/height values from a crafted HEIF ispe box are stored…FFmpeg · FFmpeg | Medium6.9 |
| CVE-2026-52297 | FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in mov_read_iacb in libavformat/mov.c.FFmpeg · FFmpeg | Low2.9 |
| CVE-2026-52296 | FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c.FFmpeg · FFmpeg | Low2.9 |
| CVE-2026-52295 | FFmpeg before 9.0 has an out-of-bounds read because the copied extradata lacked required padding before GetBitContext-based access in libavformat/iamf_writer.c.FFmpeg · FFmpeg | Low2.9 |
| CVE-2026-75147 | FFmpeg Out-of-Bounds Read in AV1 RTP Packetizer via rtpenc_av1.cFFmpeg · FFmpeg | Medium6.9 |
| CVE-2026-75146 | FFmpeg Out-of-Bounds Read in DASH Demuxer via dashdec.cFFmpeg · FFmpeg | High7.2 |
| CVE-2026-75145 | FFmpeg Integer Narrowing Conversion OOB Memory Access in AV1 RTP PacketizerFFmpeg · FFmpeg | Medium5.8 |
| CVE-2026-75144 | FFmpeg Heap Buffer Overflow in VC-2/Dirac RTP PacketizerFFmpeg · FFmpeg | High8.5 |
| CVE-2026-75143 | FFmpeg Heap Buffer Overflow via RIST Protocol ReaderFFmpeg · FFmpeg | Critical9.3 |
| CVE-2026-75142 | FFmpeg Stack Buffer Overflow in MPEG-PS Muxer via mpegenc.cFFmpeg · FFmpeg | High8.5 |
| CVE-2026-75141 | FFmpeg Heap Buffer Overflow in hvcC Box Writer via HEVC MuxingFFmpeg · FFmpeg | High8.5 |
| CVE-2026-70632 | FFmpeg 4.4 < 9.0 Heap Out-of-Bounds Write in CFHD Decoder via AVI DemuxingFFmpeg · FFmpeg | High8.5 |
| CVE-2026-70631 | FFmpeg 0.5 < 9.0 Uninitialized Heap Memory Read in TIFF DecoderFFmpeg · FFmpeg | Medium6.8 |
| CVE-2026-70630 | FFmpeg 3.0 < 9.0 Uninitialized Heap Memory Read in Screenpresso DecoderFFmpeg · FFmpeg | Medium6.8 |
| CVE-2026-70629 | FFmpeg 3.0 < 9.0 Uninitialized Heap Memory Read in RSCC DecoderFFmpeg · FFmpeg | Medium6.8 |
| CVE-2026-70628 | FFmpeg 0.5 < 9.0 DVB Subtitle Parser Heap Buffer Overflow via WTV FileFFmpeg · FFmpeg | High8.5 |
| CVE-2026-66041 | FFmpeg 7.0 - 8.1.2 Heap Out-of-Bounds Write via vf_quirc FilterFFmpeg · FFmpeg | High7.7 |
| CVE-2026-66040 | FFmpeg Heap Out-of-Bounds Write via PNG/APNG eXIf EncoderFFmpeg · FFmpeg | High8.7 |
| CVE-2026-66039 | FFmpeg MACE6 Audio Decoder Heap Out-of-Bounds Write via CAF FileFFmpeg · FFmpeg | High8.7 |
| CVE-2026-66038 | FFmpeg LCL/ZLIB Video Decoder Information Disclosure via lcldec.cFFmpeg · FFmpeg | High7.1 |
| CVE-2026-66037 | FFmpeg IAMF Demuxer Uncontrolled Resource Consumption via mix_presentation_obu()FFmpeg · FFmpeg | High7.1 |
| CVE-2026-66036 | FFmpeg Heap Out-of-Bounds Write in vf_hqdn3d FilterFFmpeg · FFmpeg | High7.7 |
| CVE-2026-65706 | FFmpeg 3.0 - 8.1.2 vf_swaprect Out-of-Bounds Write via NV12 Frame ProcessingFFmpeg · FFmpeg | High8.5 |
| CVE-2026-65705 | FFmpeg 3.4 - 8.1.2 vf_floodfill Out-of-Bounds Write via filter_frame()FFmpeg · FFmpeg | High7.3 |
| CVE-2026-65704 | FFmpeg 8.1.2 Out-of-Bounds Write via TY Demuxer and Shorten DecoderFFmpeg · FFmpeg | High7.3 |
| CVE-2026-65703 | FFmpeg 2.7 - 8.1.2 Out-of-Bounds Write in TDSC Video DecoderFFmpeg · FFmpeg | High8.5 |
| CVE-2026-64835 | FFmpeg 4.4 - 8.1.2 Out-of-Bounds Memory Access in ADX Audio DecoderFFmpeg · FFmpeg | High8.7 |
| CVE-2026-64834 | FFmpeg 0.6.3 - 8.1.2 Infinite Loop DoS via RTP/ASF DemuxerFFmpeg · FFmpeg | High8.7 |
| CVE-2026-64833 | FFmpeg 0.7.1 - 8.1.2 Out-of-Bounds Read via S/PDIF Muxer spdifenc.cFFmpeg · FFmpeg | High7.1 |
| CVE-2026-64832 | FFmpeg 4.4 - 8.1.2 Double-Free in NVDEC Hardware Decoder via nvdec.cFFmpeg · FFmpeg | High8.7 |
| CVE-2026-64831 | FFmpeg 8.0 - 8.1.2 Stack Buffer Overflow in Vulkan HEVC DecoderFFmpeg · FFmpeg | High8.7 |
| CVE-2026-64830 | FFmpeg 2.1 - 8.1.2 Heap Buffer Overflow via VobSub Subtitle DemuxerFFmpeg · FFmpeg | High8.7 |
| CVE-2026-58049 | FFmpeg - Out-of-Bounds Write in RASC Decoder decode_dlta()FFmpeg · FFmpeg | High8.8 |
| CVE-2026-8461 | Heap out-of-bounds write via odd slice_height in FFmpeg MagicYUV decoderFFmpeg · FFmpeg | High8.8 |
| CVE-2026-40962 | FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mov.c.FFmpeg · FFmpeg | Medium4.9 |