Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,625All CVEsplus 19,141 rejected
- 680Last 24 hours2,965 in the last 7 days
- 17,122Last 30 days1,607 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 2 | 1 | 0 | 1 | 6 | 20 |
| 2025 | 1 | 10 | 0 | 0 | 0 | 11 | 14 |
| 2024 | 0 | 3 | 0 | 0 | 0 | 3 | 3 |
| Title | ||
|---|---|---|
| CVE-2026-115533 | CVE-2026-115533Hugging Face · LeRobot | Not scored |
| CVE-2026-108857 | Hugging Face Text Embeddings Inference through 1.9.4 Cleartext API Key LoggingHugging Face · Text Embeddings Inference | Medium4.8 |
| CVE-2026-80047 | Hugging Face Transformers library writes remote code to disk prior to consent checkHugging Face · Transformers | High7.8 |
| CVE-2026-15679 | Hugging Face PyTorch Image Models checkpoint Deserialization of Untrusted Data Remote Code Execution VulnerabilityHugging Face · PyTorch Image Models | High7.8 |
| CVE-2026-68770 | sentence-transformers Arbitrary Code Execution on Local Model Load Despite trust_remote_code=FalseHugging Face · sentence-transformers | Critical9.3 |
| CVE-2026-25874 | LeRobot Unsafe Deserialization Remote Code Execution via gRPCHugging Face · LeRobot | Critical9.3 |
| CVE-2025-14925 | Hugging Face Accelerate Deserialization of Untrusted Data Remote Code Execution VulnerabilityHugging Face · Accelerate | High7.8 |
| CVE-2025-14922 | Hugging Face Diffusers CogView4 Deserialization of Untrusted Data Remote Code Execution VulnerabilityHugging Face · Diffusers | High7.8 |
| CVE-2025-14931 | Hugging Face smolagents Remote Python Executor Deserialization of Untrusted Data Remote Code Execution VulnerabilityHugging Face · smolagents | Critical10.0 |
| CVE-2025-14930 | Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution VulnerabilityHugging Face · Transformers | High7.8 |
| CVE-2025-14928 | Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution VulnerabilityHugging Face · Transformers | High7.8 |
| CVE-2025-14924 | Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution VulnerabilityHugging Face · Transformers | High7.8 |
| CVE-2025-14920 | Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution VulnerabilityHugging Face · Transformers | High7.8 |
| CVE-2025-14926 | Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution VulnerabilityHugging Face · Transformers | High7.8 |
| CVE-2025-14927 | Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution VulnerabilityHugging Face · Transformers | High7.8 |
| CVE-2025-14921 | Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution VulnerabilityHugging Face · Transformers | High7.8 |
| CVE-2025-14929 | Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution VulnerabilityHugging Face · Transformers | High7.8 |
| CVE-2024-11394 | Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution VulnerabilityHugging Face · Transformers | High8.8 |
| CVE-2024-11393 | Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution VulnerabilityHugging Face · Transformers | High8.8 |
| CVE-2024-11392 | Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution VulnerabilityHugging Face · Transformers | High7.5 |