Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 2 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,082All CVEsplus 19,119 rejected
- 505Last 24 hours2,865 in the last 7 days
- 16,888Last 30 days1,546 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 5 | 5 | 1 | 0 | 13 | 33 |
| 2025 | 0 | 3 | 3 | 5 | 0 | 11 | 20 |
| 2024 | 1 | 2 | 3 | 2 | 0 | 8 | 9 |
| 2023 | 0 | 1 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-110453 | Nix before 2.35.3, when unsandboxed on macOS or FreeBSD, incorrectly allows connections made by build users from daemon clients.NixOS · Nix | Medium4.3 |
| CVE-2026-110452 | The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user (who invoked the installer) even though it should be root…NixOS · Nix | Medium4.0 |
| CVE-2026-110451 | Nix before 2.35.3 and Lix before 2.95.4 on macOS allow a Seatbelt sandbox escape (for an unconfined build) because a certain size threshold is mishandled.NixOS · Nix | Medium4.3 |
| CVE-2026-110450 | Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it could destroy and then replace a store path before content…NixOS · Nix | High8.0 |
| CVE-2026-110449 | Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list…NixOS · Nix | High7.5 |
| CVE-2026-64846 | Nix: Arbitrary file truncation outside the sandbox with recursive-nix experimental featureNixOS · nix | Low2.8 |
| CVE-2026-61828 | nixos/mysql : `services.mysql` is configured with insecure authentication by default when used with `mysql` or `percona-server`NixOS · nixpkgs | High8.5 |
| CVE-2026-44029 | An issue was discovered in Nix before 2.34.7. Writing to arbitrary files can occur via "nix-prefetch-url --unpack" or "nix store prefetch-file --unpack"…NixOS · Nix | Medium5.3 |
| CVE-2026-44028 | An issue was discovered in Nix before 2.34.7 and Lix before 2.95.2. Unbounded recursion in the NAR (Nix Archive) parser could lead to a stack-to-heap overflow…NixOS · Nix | High7.5 |
| CVE-2026-39860 | Nix sandbox escape: file write via symlink at FOD `.tmp` copy destinationNixOS · nix | Critical9.0 |
| CVE-2026-25740 | Privilege escalation to the `CAP_NET_RAW` capability via the `programs.captive-browser` NixOS moduleNixOS · nixpkgs | Medium5.8 |
| CVE-2026-25137 | NixOs Odoo database and filestore publicly accessible with default odoo configurationNixOS · nixpkgs | Critical9.1 |
| CVE-2026-23838 | Tandoor Recipes module allows SQLite database to be externally accessible with the default settingsNixOS · nixpkgs | High8.7 |
| CVE-2025-64766 | NixOS has hardcoded credentials in Onlyoffice moduleNixOS · nixpkgs | Medium5.3 |
| CVE-2025-54864 | Hydra missing authentication when triggering evaluations through GitHub and Gitea pluginsNixOS · hydra | Medium6.9 |
| CVE-2025-54800 | Hydra persistent XSS in build metricsNixOS · hydra | High7.1 |
| CVE-2025-53819 | Nix's privilege dropping to build user broke for macOSNixOS · nix | High7.9 |
| CVE-2025-52993 | A race condition in the Nix, Lix, and Guix package managers enables changing the ownership of arbitrary files to the UID and GID of the build user (e.g.,…NixOS · Nix | Medium5.6 |
| CVE-2025-52992 | The Nix, Lix, and Guix package managers fail to properly set permissions when a derivation build fails. This may allow arbitrary processes to modify the…NixOS · Nix | Low3.2 |
| CVE-2025-52991 | The Nix, Lix, and Guix package managers default to using temporary build directories in a world-readable and world-writable location. This allows standard…NixOS · Nix | Low3.2 |
| CVE-2025-46416 | The Nix, Lix, and Guix package managers allow a bypass of build isolation in which a user can elevate their privileges to the build user account (e.g., nixbld…NixOS · Nix | Low2.9 |
| CVE-2025-46415 | A race condition in the Nix, Lix, and Guix package managers allows the removal of content from arbitrary folders. This affects Nix before 2.24.15, 2.26.4,…NixOS · Nix | Low3.2 |
| CVE-2025-32435 | Hydra no restricted eval after nix-eval-jobs migrationNixOS · hydra | Low2.6 |
| CVE-2025-32438 | Local privilege escalation in make-initrd-ngNixOS · nixpkgs | High8.8 |
| CVE-2024-51481 | Nix allows macOS sandbox escape via built-in buildersNixOS · nix | Low1.0 |
| CVE-2024-47174 | Credential leak when credentials are used with `<nix/fetchurl.nix>`NixOS · nix | Medium5.9 |
| CVE-2024-45593 | Nix affected by unsafe NAR unpackingNixOS · nix | Critical9.1 |
| CVE-2024-45049 | Nix Hydra Missing authentication when triggering evaluationsNixOS · hydra | High7.5 |
| CVE-2024-43378 | calamares-nixos-extensions LUKS keyfile exposure regression on legacy BIOS systemsNixOS · calamares-nixos-extensions | High7.8 |
| CVE-2024-38531 | Nix sandbox escapeNixOS · nix | Low3.6 |
| CVE-2024-32657 | Hydra has persistent XSS vulnerability serving HTML build outputsNixOS · hydra | Medium4.6 |
| CVE-2024-27297 | Nix Corruption of fixed-output derivationsNixOS · nix | Medium6.3 |
| CVE-2023-36476 | `calamares-nixos-extensions` LUKS keyfile exposureNixOS · calamares-nixos-extensions | High7.9 |