Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,791All CVEsplus 19,141 rejected
- 649Last 24 hours3,086 in the last 7 days
- 17,142Last 30 days1,604 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 18 | 28 | 0 | 0 | 46 | 63 |
| 2025 | 0 | 4 | 2 | 0 | 0 | 6 | 17 |
| 2024 | 0 | 0 | 1 | 0 | 0 | 1 | 11 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 10 |
| 2022 | 0 | 0 | 1 | 0 | 0 | 1 | 10 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 9 |
| 2020 | 0 | 2 | 1 | 0 | 0 | 3 | 9 |
| 2019 | 1 | 0 | 1 | 0 | 0 | 2 | 6 |
| 2018 | 1 | 0 | 1 | 0 | 0 | 2 | 4 |
| 2017 | 0 | 2 | 0 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-118599 | epiphany: TAR-based .xpi with hard links can overwrite user files during WebExtension installGNOME · Epiphany | Medium5.5 |
| CVE-2026-118598 | epiphany: clipboard/website-data permission prompt incorrectly grants camera and microphone accessGNOME · Epiphany | Medium6.5 |
| CVE-2026-115683 | epiphany: TLS certificate warning bypass via race in tlsErrorPage message handlerGNOME · Epiphany | Medium6.8 |
| CVE-2026-116124 | GNOME libgsf OLE2 gsf-infile-msole.c ole_info_read_metabat heap-based overflowGNOME · libgsf | Medium5.3 |
| CVE-2026-111132 | GNOME libgxps through 0.3.2 Heap Out-of-Bounds Read via path_geometry_start_elementGNOME · libgxps | Medium6.9 |
| CVE-2026-110777 | Evolution-data-server: local file disclosure via attach file:// urisGNOME · evolution-data-server | Medium5.7 |
| CVE-2026-91841 | Networkmanager-vpnc: networkmanager-vpnc: incomplete fix for cve-2018-10900 allows root privilege escalation via ca-file path newline injectionGNOME · NetworkManager-vpnc | High7.8 |
| CVE-2026-91840 | Networkmanager-vpnc: networkmanager-vpnc: local privilege escalation to root via newline injection in vpn usernameGNOME · NetworkManager-vpnc | High7.8 |
| CVE-2026-91839 | Networkmanager-fortisslvpn: networkmanager-fortisslvpn: local privilege escalation to root via crlf injection in vpn profile credentialsGNOME · NetworkManager-fortisslvpn | High7.8 |
| CVE-2026-91838 | Networkmanager-sstp: networkmanager-sstp: local privilege escalation to root via shell injection in vpn profile fieldsGNOME · NetworkManager-sstp | High7.8 |
| CVE-2026-91837 | Networkmanager-iodine: networkmanager-iodine: local privilege escalation to root via nameserver option injectionGNOME · NetworkManager-iodine | High7.8 |
| CVE-2026-97222 | Gnumeric: gnumeric: heap use-after-free when opening a malformed workbookGNOME · Gnumeric | Medium5.5 |
| CVE-2026-92248 | Gimp: integer overflow when generating a thumbnail preview for a psd fileGNOME · GIMP | High7.8 |
| CVE-2026-88924 | Gvfs: gvfs-admin socket ownership race permits local rootGNOME · gvfs | High7.0 |
| CVE-2026-84270 | Gvfs: mtp: out-of-bounds read in do_read()GNOME · gvfs | Medium4.3 |
| CVE-2026-84269 | Gvfs: afp: heap-based buffer overflow in dsi read pathGNOME · gvfs | Medium6.5 |
| CVE-2026-84267 | Gvfs: sftp: uninitialized heap disclosure in read_string()GNOME · gvfs | Medium4.3 |
| CVE-2026-84268 | Gvfs: sftp: heap-based buffer overflow in read_reply()GNOME · gvfs | High8.8 |
| CVE-2026-82343 | Gimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handlingGNOME · GIMP | Medium6.1 |
| CVE-2026-82330 | Gimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds checkGNOME · GIMP | Medium6.1 |
| CVE-2026-82328 | Gimp: heap out-of-bounds read in ico loader via unvalidated used_clrs palette countGNOME · GIMP | Medium6.1 |
| CVE-2026-82324 | Gimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0GNOME · GIMP | Medium6.1 |
| CVE-2026-77652 | Dia: dia: heap buffer overflow in wpg colormap parser via out-of-bounds palette indexGNOME · Dia | High7.8 |
| CVE-2026-79902 | Gimp: stack vla size underflow denial of service in seattleGNOME · GIMP | Medium5.5 |
| CVE-2026-77658 | Dia: dia: stack buffer overflow in bus object via unvalidated handle count in project filesGNOME · Dia | High7.8 |
| CVE-2026-80101 | Gimp: multiple heap out-of-bounds reads in xwd loader from unrelated width and bytes-per-line validationGNOME · GIMP | Medium4.4 |
| CVE-2026-78475 | Gimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loaderGNOME · GIMP | Medium6.1 |
| CVE-2026-78465 | Gimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bitGNOME · GIMP | High7.0 |
| CVE-2026-18487 | Epiphany: address bar / host spoofing via userinfo in ephy_uri_get_decoded_host()GNOME · Epiphany | Medium5.4 |
| CVE-2026-18358 | Gnome-remote-desktop: gnome-remote-desktop system-mode rdp server missing connection throttling allows unauthenticated denial of serviceGNOME · gnome-remote-desktop | High7.5 |
| CVE-2026-66759 | Gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns imagesGNOME · GIMP | High7.1 |
| CVE-2026-66757 | Gimp: signed integer overflow in file-sgi (sgi-lib) causes the plugin to crash on rle sgi imagesGNOME · GIMP | Medium5.5 |
| CVE-2026-66758 | Gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits imagesGNOME · GIMP | High7.8 |
| CVE-2026-16768 | Gdk-pixbuf: out-of-bounds read in ico parserGNOME · gdk-pixbuf | Medium5.3 |
| CVE-2026-16615 | Librest: weak random number generation in pkce implementationGNOME · librest | Medium6.8 |
| CVE-2026-58016 | Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"GNOME · GLib | High7.5 |
| CVE-2026-58015 | Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receiveGNOME · GLib | Medium5.9 |
| CVE-2026-58014 | Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"GNOME · GLib | High7.3 |
| CVE-2026-58013 | Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"GNOME · GLib | Medium6.5 |
| CVE-2026-58012 | Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()GNOME · GLib | Medium6.5 |
| CVE-2026-58011 | Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetimeGNOME · GLib | Medium6.5 |
| CVE-2026-58010 | Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()GNOME · GLib | Medium6.5 |
| CVE-2026-6653 | libxml2: Use after free in xmlParseInternalSubset via improper entity resolution handlingGNOME · libxml2 | High7.0 |
| CVE-2026-2604 | Evolution-data-server: evolution data server: arbitrary file deletion via inconsistent uri handlingGNOME · Evolution Data Server | Medium5.6 |
| CVE-2026-44931 | malcontent: Disk Space Exhaustion via Globally Accessible D-Bus APIgnome · malcontent | Medium5.1 |
| CVE-2020-37011 | Gnome Fonts Viewer 3.34.0 Heap CorruptionGNOME · Fonts Viewer | High8.4 |
| CVE-2025-14512 | Glib: integer overflow in glib gio attribute escaping causes heap buffer overflowGNOME · glib | Medium6.5 |
| CVE-2025-14087 | Glib: glib: buffer underflow in gvariant parser leads to heap corruptionGNOME · glib | Medium5.6 |
| CVE-2025-12105 | Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completionGNOME · libsoup | High7.5 |
| CVE-2025-7424 | Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodesGNOME · libxslt | High7.5 |