Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,576All CVEsplus 18,890 rejected
- 363Last 24 hours2,985 in the last 7 days
- 17,102Last 30 days1,586 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 3 | 63 | 10 | 3 | 0 | 79 | 165 |
| 2025 | 0 | 0 | 4 | 0 | 0 | 4 | 86 |
| 2024 | 7 | 14 | 11 | 1 | 0 | 33 | 82 |
| 2023 | 2 | 6 | 4 | 0 | 0 | 12 | 49 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 37 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 37 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 | 37 |
| 2019 | 3 | 6 | 3 | 0 | 0 | 12 | 37 |
| 2018 | 3 | 12 | 7 | 0 | 0 | 22 | 25 |
| 2017 | 0 | 1 | 0 | 2 | 0 | 3 | 3 |
| Title | ||
|---|---|---|
| CVE-2026-101311 | Multiple vulnerabilities in bhyve device modelsFreeBSD · FreeBSD | High7.0 |
| CVE-2026-101310 | Multiple vulnerabilities in bhyve device modelsFreeBSD · FreeBSD | High7.0 |
| CVE-2026-101309 | Multiple vulnerabilities in bhyve device modelsFreeBSD · FreeBSD | High7.0 |
| CVE-2026-101308 | TOCTOU race between sound(4) buffer resizing and mmapFreeBSD · FreeBSD | Medium5.5 |
| CVE-2026-101307 | Remotely triggerable buffer overflow in tcp_rackFreeBSD · FreeBSD | High8.2 |
| CVE-2026-101303 | IPv6 UDP sendto(2) bypasses jail loopback restrictionFreeBSD · FreeBSD | High7.5 |
| CVE-2026-101302 | Remote DoS via receive-side kernel TLSFreeBSD · FreeBSD | Medium6.5 |
| CVE-2026-101306 | Multiple jail filesystem root escapesFreeBSD · FreeBSD | Critical9.8 |
| CVE-2026-101305 | Multiple jail filesystem root escapesFreeBSD · FreeBSD | High8.8 |
| CVE-2026-101304 | Multiple jail filesystem root escapesFreeBSD · FreeBSD | High7.1 |
| CVE-2026-58100 | Memory safety bugs in kqueue copy-on-fork implementationFreeBSD · FreeBSD | High7.0 |
| CVE-2026-58099 | Memory safety bugs in kqueue copy-on-fork implementationFreeBSD · FreeBSD | High7.0 |
| CVE-2026-58098 | Heap out-of-bounds access in semop(2)FreeBSD · FreeBSD | High8.4 |
| CVE-2026-58094 | TOCTOU race in POSIX shared memory large page configurationFreeBSD · FreeBSD | High7.8 |
| CVE-2026-58093 | Kernel use-after-free via tty ioctlsFreeBSD · FreeBSD | High7.0 |
| CVE-2026-58097 | ppp(8): missing length validation in mp_SetEnddisc()FreeBSD · FreeBSD | High7.8 |
| CVE-2026-58096 | ppp(8): missing length validation in LcpDecodeConfig()FreeBSD · FreeBSD | High8.8 |
| CVE-2026-58095 | ppp(8): incorrect length calculation in mp_Enddisc()FreeBSD · FreeBSD | High8.8 |
| CVE-2026-58092 | Unauthorized credential switchingFreeBSD · FreeBSD | High8.1 |
| CVE-2026-58091 | Kernel use-after-free via the SNDCTL_DSP_SYNCSTART ioctlFreeBSD · FreeBSD | High7.8 |
| CVE-2026-58090 | Use-after-free in unix SOCK_STREAM message handlingFreeBSD · FreeBSD | High7.8 |
| CVE-2026-58089 | hwpmc fails to detach PMCs during exec credential transitionsFreeBSD · FreeBSD | High7.8 |
| CVE-2026-58088 | Race condition in ELF core dump segment countingFreeBSD · FreeBSD | High7.4 |
| CVE-2026-58087 | Heap out-of-bounds access in semctl(2)FreeBSD · FreeBSD | High7.8 |
| CVE-2026-58086 | ktrace(2) privilege incorrectly validated in jailsFreeBSD · FreeBSD | High8.1 |
| CVE-2026-58085 | Missing MAC validation in wg(4) packet decryptionFreeBSD · FreeBSD | High7.5 |
| CVE-2026-58084 | Kernel stack disclosure via timer_settime(2)FreeBSD · FreeBSD | Medium5.5 |
| CVE-2026-58083 | Use-after-free in kqueue copy-on-forkFreeBSD · FreeBSD | High8.4 |
| CVE-2026-58082 | Stack based buffer overflow in iconv(3)FreeBSD · FreeBSD | Critical9.8 |
| CVE-2026-58081 | Heap based buffer overflow in iconv(3)FreeBSD · FreeBSD | Critical9.8 |
| CVE-2026-49425 | Kernel stack disclosure in 32-bit compatibility supportFreeBSD · FreeBSD | Medium5.5 |
| CVE-2026-49424 | Kernel stack disclosure in Linux compatibility layerFreeBSD · FreeBSD | Medium5.5 |
| CVE-2026-49423 | Remote DOS via uninitialized memory access in KTLS receiveFreeBSD · FreeBSD | Low3.3 |
| CVE-2026-49426 | Incorrect audit records for ptrace(2) syscall requestsFreeBSD · FreeBSD | Low3.3 |
| CVE-2026-49428 | posixshm: system calls can incorrectly free memory of largepage objectsFreeBSD · FreeBSD | High8.4 |
| CVE-2026-49427 | posixshm: largepage shared memory objects not explicitly wiredFreeBSD · FreeBSD | High8.8 |
| CVE-2026-49422 | Use-after-free in TCP RACK stack option handlerFreeBSD · FreeBSD | High8.4 |
| CVE-2026-49421 | unlinkat(2) ignores AT_RESOLVE_BENEATH flagFreeBSD · FreeBSD | High7.1 |
| CVE-2026-49420 | Buffer overflow in libalias RTSP handlerFreeBSD · FreeBSD | High8.8 |
| CVE-2026-49431 | Incorrect user validation in ZFS_IOC_SET_PROP ioctlFreeBSD · FreeBSD | Low3.3 |
| CVE-2026-49430 | Kernel heap overflow in ZFS_IOC_RECV_NEW ioctlFreeBSD · FreeBSD | High7.8 |
| CVE-2026-49429 | Kernel heap overflow in ZFS_IOC_USERSPACE_MANY ioctlFreeBSD · FreeBSD | High7.8 |
| CVE-2026-49415 | Local privilege escalation via execve(2) TOCTOU raceFreeBSD · FreeBSD | High8.8 |
| CVE-2026-49419 | Jail reference count underflowFreeBSD · FreeBSD | High8.8 |
| CVE-2026-49418 | Use-after-free in device pager page listFreeBSD · FreeBSD | High8.8 |
| CVE-2026-49416 | Integer overflow in vt(4) CONS_HISTORY ioctlFreeBSD · FreeBSD | High7.8 |
| CVE-2026-49414 | ASLR bypass for setuid executables via procctl(2)FreeBSD · FreeBSD | High7.8 |
| CVE-2026-49413 | Flaw in Linuxulator execution of setugid binariesFreeBSD · FreeBSD | High7.1 |
| CVE-2026-49412 | Use-after-free bug in the IPV6_MSFILTER socket option handlerFreeBSD · FreeBSD | High7.8 |
| CVE-2026-45259 | sigqueue(2) missing capability mode restrictionFreeBSD · FreeBSD | Medium6.5 |