Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 401,955All CVEsplus 19,141 rejected
  • 284Last 24 hours3,207 in the last 7 days
  • 16,980Last 30 days1,574 of them critical
  • 1,769Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
202601000111
202500200210
20240000008
20230000008
20220000008
20210000008
20200100018
20190120037
20180000004
20170310044

Latest CVEs

11 CVEs, newest first

CVEs, newest first
Title
CVE-2026-12600
Uncontrolled memory usage in Innodata Labs’ Poppler JPX decoderPoppler · Innodata Labs
High8.7
CVE-2025-52885
GHSL-2025-042: Poppler has Use-After-Freepoppler · poppler
Medium6.1
CVE-2025-52886
Poppler Use After Free Vulnerabilitypoppler · poppler
Medium5.5
CVE-2012-2142
The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a…poppler · poppler
High7.8
CVE-2010-4654
poppler before 0.16.3 has malformed commands that may cause corruption of the internal stack.poppler · poppler
High7.8
CVE-2010-4653
An integer overflow condition in poppler before 0.16.3 can occur when parsing CharCodes for fonts.poppler · poppler
Medium6.5
CVE-2010-0207
In xpdf, the xref table contains an infinite loop which allows remote attackers to cause a denial of service (application crash) in xpdf-based PDF viewers.poppler · poppler
Medium5.5
CVE-2017-2820
An exploitable integer overflow vulnerability exists in the JPEG 2000 image parsing functionality of freedesktop.org Poppler 0.53.0. A specially crafted PDF…Poppler · Poppler
High8.8
CVE-2017-2818
An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0. A specifically crafted PDF can cause an overly large…Poppler · Poppler
High7.5
CVE-2017-2814
An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0. A specifically crafted pdf can cause an image…Poppler · Poppler
High7.5
CVE-2017-7511
poppler since version 0.17.3 has been vulnerable to NULL pointer dereference in pdfunite triggered by specially crafted documents.Poppler · poppler
Medium5.5