Skip to content
CVE Tracker

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 400,261All CVEsplus 18,875 rejected
  • 743Last 24 hours3,096 in the last 7 days
  • 17,434Last 30 days1,577 of them critical
  • 1,767Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
2026027201116
20250000005
20240010015
20230000004
20220000004
20210000004
20200000004
20190000004
20180000004
20170130044

Latest CVEs

16 CVEs, newest first

CVEs, newest first
Title
CVE-2026-115724
VLC for Android before 3.7.2 File Overwrite via Spoofed Mail Attachment ProviderVideoLAN · VLC for Android
Low2.1
CVE-2026-112283
libbluray through 1.5.1 Uncontrolled Memory Allocation via _parse_extent_start_pointsVideoLAN · libbluray
Medium6.8
CVE-2026-112282
VideoLAN libbluray through 1.5.1 Out-of-Bounds Read via clpi_access_pointVideoLAN · libbluray
Medium6.8
CVE-2026-112058
libdvdnav through 7.0.0 Out-of-Bounds Read via set_PTT JumpTTVideoLAN · libdvdnav
Medium6.8
CVE-2026-112057
libdvdnav before 7.0.0 Out-of-Bounds Read in dvdnav_describe_title_chaptersVideoLAN · libdvdnav
Medium6.8
CVE-2026-102875
VLC media player before 3.0.24 Path Traversal via skins2videolan · vlc
High8.5
CVE-2026-73324
VLC media player 3.0.0 through 3.0.23 information disclosure vulnerabilityVideoLAN · VLC media player
Medium5.3
CVE-2026-56711
VLC media player 3.0.0 through 3.0.23 memory corruption vulnerabilityVideoLAN · VLC media player
High7.3
CVE-2026-26227
VLC for Android < 3.7.0 Remote Access OTP Authentication BypassVideoLAN · VLC for Android
Medium6.3
CVE-2026-26228
VLC for Android < 3.7.0 Remote Access Path TraversalVideoLAN · VLC for Android
Low2.3
CVE-2025-51602
mmstu.c in VideoLAN VLC media player before 3.0.22 allows an out-of-bounds read and denial of service via a crafted 0x01 response from an MMS server.VideoLAN · VLC media player
Medium4.8
CVE-2024-1580
Integer overflow in VideoLAN dav1dVideoLAN · dav1d
Medium5.9
CVE-2017-8313
Heap out-of-bound read in ParseJSS in VideoLAN VLC before 2.2.5 due to missing check of string termination allows attackers to read data beyond allocated…VideoLAN · VLC
Medium5.5
CVE-2017-8312
Heap out-of-bound read in ParseJSS in VideoLAN VLC due to missing check of string length allows attackers to read heap uninitialized data via a crafted…VideoLAN · VLC
Medium5.5
CVE-2017-8311
Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before 2.2.5 due to skipping NULL terminator in an input string allows attackers to execute…VideoLAN · VLC
High7.8
CVE-2017-8310
Heap out-of-bound read in CreateHtmlSubtitle in VideoLAN VLC 2.2.x due to missing check of string termination allows attackers to read data beyond allocated…VideoLAN · VLC
Medium5.5