Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,333All CVEsplus 19,141 rejected
- 446Last 24 hours2,723 in the last 7 days
- 16,935Last 30 days1,562 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 549 | 3,010 | 1,623 | 3 | 3,060 | 8,245 | 18,368 |
| 2025 | 159 | 2,060 | 2,555 | 4 | 897 | 5,675 | 10,123 |
| 2024 | 155 | 1,820 | 2,294 | 37 | 0 | 4,306 | 4,448 |
| 2023 | 1 | 38 | 7 | 1 | 0 | 47 | 142 |
| 2022 | 1 | 15 | 33 | 16 | 0 | 65 | 95 |
| 2021 | 0 | 8 | 1 | 0 | 0 | 9 | 30 |
| 2020 | 0 | 0 | 2 | 0 | 0 | 2 | 21 |
| 2019 | 1 | 3 | 6 | 0 | 0 | 10 | 19 |
| 2018 | 0 | 5 | 4 | 0 | 0 | 9 | 9 |
| Title | ||
|---|---|---|
| CVE-2026-100082 | xen-blkback: Avoid UAF when reading I/O statisticsLinux · Linux | Not scored |
| CVE-2026-100081 | xen-netback: defer xenvif_mcast_addr_list_free()Linux · Linux | Not scored |
| CVE-2026-100080 | xen-netback: Fix UAF when reading statistics dataLinux · Linux | Not scored |
| CVE-2026-99270 | tcp: Fix potential UAF in reqsk_timer_handler().Linux · Linux | High8.1 |
| CVE-2026-99269 | sched_ext: Wait for SCX_OPSS_DISPATCHING before moving tasks off DSQsLinux · Linux | High7.8 |
| CVE-2026-99261 | drm/amdgpu: correct reservation fence slots for userq per-vm BOs evictionLinux · Linux | Not scored |
| CVE-2026-99260 | ntfs: fix resident conversion in ntfs_new_attr_flagsLinux · Linux | Not scored |
| CVE-2026-99259 | soc/tegra: pmc: Fix uninitialised clock rateLinux · Linux | Not scored |
| CVE-2026-99258 | x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index()Linux · Linux | Not scored |
| CVE-2026-99257 | gpio: shared: gracefully handle no-device lookup of shared GPIOsLinux · Linux | Not scored |
| CVE-2026-99256 | dm cache: fix issue with background work lockingLinux · Linux | Not scored |
| CVE-2026-99255 | io_uring/io-wq: don't hide a link from cancellationsLinux · Linux | Not scored |
| CVE-2026-99254 | io_uring: don't flood a cancelling task with task_workLinux · Linux | Not scored |
| CVE-2026-99253 | io_uring/cancel: rearm local work wake up before sleepLinux · Linux | Not scored |
| CVE-2026-99251 | Drivers: hv: Avoid infinite retry loop in init_vp_index()Linux · Linux | Not scored |
| CVE-2026-99250 | printk: Postpone kthread startupLinux · Linux | Not scored |
| CVE-2026-99249 | pid_namespace: make zap_pid_ns_processes() freezableLinux · Linux | Not scored |
| CVE-2026-99248 | i2c: xiic: restore non-managed runtime PM to fix clk WARN floodLinux · Linux | Not scored |
| CVE-2026-99247 | tracing: Do not initialize tracefs work if tracing is disabledLinux · Linux | Not scored |
| CVE-2026-99246 | tipc: protect node reset trace dump with node lockLinux · Linux | High8.1 |
| CVE-2026-99245 | KEYS: Fix key_reject_and_link() race with keyring restrictionLinux · Linux | Not scored |
| CVE-2026-99244 | pid_namespace: prevent TIF_NOTIFY_SIGNAL from interrupting the reaperLinux · Linux | Not scored |
| CVE-2026-99242 | ntfs: fix race between fallocate and mmap readsLinux · Linux | Not scored |
| CVE-2026-99241 | ntfs: take invalidate_lock in ntfs_filemap_page_mkwrite()Linux · Linux | Not scored |
| CVE-2026-99240 | mm/damon/core: error damos_commit_quota_goal() for zero target_valueLinux · Linux | Not scored |
| CVE-2026-99239 | Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has connLinux · Linux | High7.8 |
| CVE-2026-99238 | tracing: Hold trace_types_lock when updating modules in persistent instancesLinux · Linux | High7.8 |
| CVE-2026-99237 | tracing: Hold trace_types_lock when resetting last boot data from readersLinux · Linux | High7.8 |
| CVE-2026-99236 | tracing: Reject incomplete event filter expressionsLinux · Linux | High7.8 |
| CVE-2026-99235 | tracing: Save the event file instead of the compatible histogramLinux · Linux | High7.8 |
| CVE-2026-99234 | tracing: Unregister field variable histograms when the command failsLinux · Linux | Not scored |
| CVE-2026-99233 | tracing/histograms: Verify event_call identity when updating synth_event refcountLinux · Linux | High7.8 |
| CVE-2026-99232 | tracing/syscalls: Use copy_from_user for the faultable syscall bufferLinux · Linux | Not scored |
| CVE-2026-99231 | io_uring/waitid: own the request before clearing ->headLinux · Linux | High7.8 |
| CVE-2026-99230 | io_uring/cmd: don't leave list poison in ->hash_nodeLinux · Linux | Not scored |
| CVE-2026-99229 | io_uring/wait: don't spin on a stuck overflow listLinux · Linux | Not scored |
| CVE-2026-99228 | io_uring/io-wq: don't lose the signal that ends workLinux · Linux | Not scored |
| CVE-2026-99227 | io_uring/waitid: prevent cancel reference wrapLinux · Linux | High7.8 |
| CVE-2026-99226 | keys: Avoid the owner account dereference in named keyring lookupLinux · Linux | Not scored |
| CVE-2026-99225 | keys: Check the authorization payload in process keyring searchesLinux · Linux | Not scored |
| CVE-2026-99224 | keys: Protect the type name while describing a keyLinux · Linux | High7.0 |
| CVE-2026-99223 | keys: make keyring indexes independent of kernel addressesLinux · Linux | Not scored |
| CVE-2026-99222 | keys: Protect the read method check against type removalLinux · Linux | Not scored |
| CVE-2026-99221 | keys/trusted_keys: return immediately after TPM unseal failureLinux · Linux | Not scored |
| CVE-2026-99220 | asymmetric_keys: reject trust keys without IDsLinux · Linux | Not scored |
| CVE-2026-99219 | ftrace: Initialize modname and offset in print_rec()Linux · Linux | Not scored |
| CVE-2026-99218 | coredump: hold RCU while releasing parked threadsLinux · Linux | High7.0 |
| CVE-2026-99216 | Drivers: hv: Don't reset VMBus connection state on error/exit pathsLinux · Linux | High8.4 |
| CVE-2026-99215 | power: supply: core: prevent unregistering a power supply while a callback runsLinux · Linux | Not scored |
| CVE-2026-99214 | drm/vc4: hdmi: Move packet RAM enable to PM runtimeLinux · Linux | Not scored |