Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 2 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,890All CVEsplus 19,117 rejected
- 453Last 24 hours2,943 in the last 7 days
- 16,833Last 30 days1,557 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 64 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 64 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 64 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 64 |
| 2022 | 1 | 5 | 17 | 1 | 0 | 24 | 64 |
| 2021 | 0 | 3 | 12 | 1 | 0 | 16 | 40 |
| 2020 | 2 | 2 | 17 | 3 | 0 | 24 | 24 |
| Title | ||
|---|---|---|
| CVE-2022-3095 | Incorrect parsing of the backslash characters in Dart libraryGoogle LLC · Dart | Critical9.8 |
| CVE-2022-3474 | Bazel leaks user credentials through the remote assets APIGoogle LLC · Bazel | Medium5.1 |
| CVE-2022-3421 | Privilege escalation in Google Drive for Desktop on MacOSGoogle LLC · Drive for Desktop MacOS | Medium5.6 |
| CVE-2022-3171 | Memory handling vulnerability in ProtocolBuffers Java core and liteGoogle LLC · Protocolbuffers | Medium4.3 |
| CVE-2022-1941 | Out of Memory issue in ProtocolBuffers for cpp and pythonGoogle LLC · protobuf-cpp | High7.5 |
| CVE-2022-1798 | Path Traversal vulnerability in KubevirtGoogle LLC · Kubevirt | High8.7 |
| CVE-2022-2390 | Mutable pending intent in Google Play services SDKGoogle LLC · Play Services SDK | Medium6.1 |
| CVE-2022-1799 | Incorrect signature verification on Google play-services-basement in Google Play SDKGoogle LLC · Google Play Services SDK | Medium5.7 |
| CVE-2022-0882 | Illegal access to Kernel log in FuchsiaGoogle LLC · Fuchsia Kernel | Medium5.3 |
| CVE-2021-22556 | Integer Overflow in Fuchsia KernelGoogle LLC · Fuchsia Kernel | Medium5.3 |
| CVE-2021-22573 | Incorrect signature verification on Google-oauth-java-clientGoogle LLC · Google-oauth-java-client | High8.7 |
| CVE-2022-0343 | Local Priviledge escalation in Perfetto Dev scriptsGoogle LLC · Perfetto Dev Scripts | Low3.3 |
| CVE-2021-22572 | Data-transfer-project information disclosure via tmp directoryGoogle LLC · Data-Transfer-Project | Medium5.5 |
| CVE-2021-22571 | Information Leak in SA360-webquery-bigquery through read on /tmpGoogle LLC · google/sa360-webquery-bigquery | Medium5.5 |
| CVE-2022-0247 | Write access to VMO data through copy-on-write in FuchsiaGoogle LLC · Fuchsia | High7.5 |
| CVE-2022-25328 | Privilege escalation through command injection in fscryptGoogle LLC · fscrypt | Medium5.0 |
| CVE-2022-25327 | Local Denial of Service in fscrypt PAM moduleGoogle LLC · fscrypt | Medium5.5 |
| CVE-2022-25326 | Denial of Service in fscryptGoogle LLC · fscrypt | Medium5.5 |
| CVE-2022-0451 | Auth bypass in Dark SDKGoogle LLC · Dart SDK | Medium6.5 |
| CVE-2022-0317 | Improper Input Validation in AKPublic.Verify in go-attestationGoogle LLC · go-attestation | Medium4.0 |
| CVE-2021-22570 | Nullptr Dereference in ProtobufGoogle LLC · Protobuf | Medium6.5 |
| CVE-2021-22566 | Incorrect mapping of Executable bits in Fuchsia KernelGoogle LLC · Fuchsia | Medium5.1 |
| CVE-2021-22569 | Denial of Service of protobuf-java parsing procedureGoogle LLC · protobuf-java | High7.5 |
| CVE-2021-22567 | Bidirectional Override in Dart SDKGoogle LLC · Dart SDK | Medium4.6 |
| CVE-2021-22568 | Dart - Publishing to third-party package repositories may expose pub.dev credentialsGoogle LLC · Dart SDK | High8.8 |
| CVE-2021-22565 | Insufficient Granularity of Access Control in GAEN Notification ServerGoogle LLC · Google Exposure-notifications-verification-server | Medium6.5 |
| CVE-2021-22564 | Out of bounds Copy in Libjxl in large image groupsGoogle LLC · libjxl | Medium4.5 |
| CVE-2021-22563 | Memory Overread in libjxlGoogle LLC · libjxl | Medium4.5 |
| CVE-2021-22557 | Code execution in SLO Generator via YAML PayloadGoogle LLC · SLO Generator | Medium5.3 |
| CVE-2021-22552 | Memory overread secure enclave in Asylo 0.6.2Google LLC · Asylo | Medium5.3 |
| CVE-2021-22545 | Use-after-free in BinDiffGoogle LLC · Bindiff | High7.5 |
| CVE-2021-22550 | Enclave memory overwrite/overread vulnerability in Asylo UntrustedCacheMalloc::GetBufferGoogle LLC · Asylo | Medium6.5 |
| CVE-2021-22549 | Arbitrary enclave memory overwrite vulnerability in Asylo TrustedPrimitives::UntrustedCallGoogle LLC · Asylo | Medium6.5 |
| CVE-2021-22548 | Arbitrary enclave memory overread vulnerability in Asylo TrustedPrimitives::UntrustedCallGoogle LLC · Asylo | Medium6.5 |
| CVE-2021-22547 | Buffer overrun in Google Cloud IoT Device SDK for Embedded CGoogle LLC · Google Cloud IoT Device SDK for Embedded C | Medium6.3 |
| CVE-2021-22540 | XSS in Dart SDKGoogle LLC · Dart SDK | Medium6.1 |
| CVE-2021-22539 | Code execution in VSCode-bazel via malicious Bazel config filesGoogle LLC · VSCode-Bazel | High8.2 |
| CVE-2021-22538 | Privilege escalation in RBAC systemGoogle LLC · Exposure Notifications Verification Server | Medium6.3 |
| CVE-2020-8902 | SSRF in RendertronGoogle LLC · Rendertron | Low3.5 |
| CVE-2021-22553 | Heap Memory exhaustion in GerritGoogle LLC · Gerrit | Medium6.5 |
| CVE-2020-8944 | Unchecked buffer overrun in ecall_restoreGoogle LLC · Asylo | Medium5.3 |
| CVE-2020-8943 | Unchecked buffer overrun in enc_untrusted_recvfromGoogle LLC · Asylo | Medium5.3 |
| CVE-2020-8942 | Unchecked buffer overrun in enc_untrusted_readGoogle LLC · Asylo | Medium5.3 |
| CVE-2020-8941 | Unchecked buffer overrun in enc_untrusted_inet_ptonGoogle LLC · Asylo | Medium5.3 |
| CVE-2020-8940 | Unchecked buffer overrun in enc_untrusted_recvmsgGoogle LLC · Asylo | Medium5.3 |
| CVE-2020-8939 | Out of Bounds read in AsyloGoogle LLC · Asylo | Medium5.3 |
| CVE-2020-8938 | Arbitrary enclave memory location write from untrusted environmentGoogle LLC · Asylo | Medium5.3 |
| CVE-2020-8937 | Arbitrary enclave memory location write from untrusted environmentGoogle LLC · Asylo | Medium5.3 |
| CVE-2020-8936 | Arbitrary enclave memory overwrite vulnerability in ECall ecall_restoreGoogle LLC · Asylo | Medium5.3 |
| CVE-2020-8935 | An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allow an attacker to make an Ecall_restore function call to reallocate untrusted code…Google LLC · Asylo | Medium5.3 |