Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 400,959All CVEsplus 19,118 rejected
  • 394Last 24 hours2,829 in the last 7 days
  • 16,813Last 30 days1,548 of them critical
  • 1,768Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
2026236001115
20250000004
20240120034
20230000001
20220000001
20210000001
20200000001
20190000001
20180000001
20170010011

Latest CVEs

15 CVEs, newest first

CVEs, newest first
Title
CVE-2026-118769
Botan: Integer overflow when reporting block size in FFI can cause memory corruptionrandombit · botan
Critical9.2
CVE-2026-118768
Botan: CLI utility `ocsp_check` accepts unauthenticated responsesrandombit · botan
Medium5.9
CVE-2026-118767
Botan: Python binding bcrypt APIs truncate passwords containing embedded NULsrandombit · botan
Medium4.8
CVE-2026-118766
Botan: Online OCSP redirects enable blind requests to internal HTTP servicesrandombit · botan
Medium6.1
CVE-2026-118765
Botan: AutoSeeded_RNG can become reinitialized from predictable data after clearing staterandombit · botan
High7.3
CVE-2026-44378
Botan: Quadratic complexity decoding BER indefinite length encodingsrandombit · botan
Medium6.9
CVE-2026-34582
Botan has a TLS 1.3 certificate authentication bypassrandombit · botan
High8.7
CVE-2026-34580
Botan has a certificate authentication bypass due to trust anchor confusionrandombit · botan
Critical9.3
CVE-2026-32877
Botan: Heap Buffer Over-read in SM2 Decryption via Undersized C3 Hash Fieldrandombit · botan
High8.2
CVE-2026-32883
Botan: Missing OCSP Response Signature Verification Allows MitM Certificate Revocation Bypassrandombit · botan
Medium5.9
CVE-2026-32884
Botan: Case-Insensitive CN Values Bypass DNS excludedSubtrees Name Constraints (RFC 5280 Violation)randombit · botan
Medium5.9
CVE-2024-39312
Botan has an Authorization Error due to Name Constraint Decoding Bugrandombit · botan
Medium5.3
CVE-2024-34702
Botan has a Denial of Service Due to Excessive Name Constraintsrandombit · botan
Medium5.3
CVE-2024-34703
Botan Vulnerable to Denial of Service Due to Overly Large Elliptic Curve Parametersrandombit · botan
High7.5
CVE-2017-2801
A programming error exists in a way Randombit Botan cryptographic library version 2.0.1 implements x500 string comparisons which could lead to certificate…Randombit · Botan
Medium6.5