Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,111All CVEsplus 18,873 rejected
- 792Last 24 hours3,268 in the last 7 days
- 17,396Last 30 days1,568 of them critical
- 1,767Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 3 | 20 | 30 | 28 | 0 | 81 | 106 |
| 2025 | 2 | 1 | 3 | 6 | 0 | 12 | 25 |
| 2024 | 1 | 1 | 8 | 0 | 0 | 10 | 13 |
| 2023 | 1 | 0 | 0 | 0 | 0 | 1 | 3 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 2 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 2 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 | 2 |
| 2019 | 0 | 0 | 0 | 0 | 0 | 0 | 2 |
| 2018 | 0 | 0 | 0 | 0 | 0 | 0 | 2 |
| 2017 | 0 | 2 | 0 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-83540 | wolfSSHd on Windows race condition leading to logon token reused across connectionswolfSSL · wolfSSH | High7.7 |
| CVE-2026-15442 | Heap use-after-free on read during bidirectional (D)TLS shutdownwolfSSL · wolfSSL | Low2.3 |
| CVE-2026-89102 | OCSP stapling v2 multi accepts non-CA chain certificates as issuerswolfSSL · wolfSSL | High8.3 |
| CVE-2026-89133 | NameConstraints not enforced across unconstrained intermediate CAwolfSSL · wolfSSL | Medium6.3 |
| CVE-2026-89134 | Subject CN name-constraint check bypassed when non-DNS SAN presentwolfSSL · wolfSSL | Medium6.3 |
| CVE-2026-89135 | Failed X509_verify_cert leaves unverified CA in shared CertManagerwolfSSL · wolfSSL | Medium6.3 |
| CVE-2026-89136 | Client accepts unsolicited RawPublicKey server certificate typewolfSSL · wolfSSL | High8.3 |
| CVE-2026-93302 | Trusted peer certificate match ignores public key, allowing forged CA cloneswolfSSL · wolfSSL | High8.3 |
| CVE-2026-93304 | (D)TLS 1.2 client accepts early ChangeCipherSpec before ClientKeyExchangewolfSSL · wolfSSL | Medium6.3 |
| CVE-2026-94417 | CRL check skipped when OCSP enabled and certificate has no OCSP URLwolfSSL · wolfSSL | Low2.3 |
| CVE-2026-94418 | Signature failure masked by date error under WOLFSSL_SMALL_CERT_VERIFYwolfSSL · wolfSSL | Low2.3 |
| CVE-2026-94419 | Client session cache reference poisoning allows resumption with wrong serverwolfSSL · wolfSSL | Low2.3 |
| CVE-2026-7511 | PKCS7_verify signer confusion allows forged signatures to be acceptedwolfSSL · wolfSSL | Medium5.9 |
| CVE-2026-7532 | iPAddress name constraints not enforced when WOLFSSL_IP_ALT_NAME is undefinedwolfSSL · wolfSSL | Medium5.7 |
| CVE-2026-8720 | HMAC-BLAKE2 final discards message when key length exceeds block sizewolfSSL · wolfSSL | Medium5.9 |
| CVE-2026-10098 | OCSP CertID serial-number length-confusion in wolfSSL_OCSP_resp_find_statuswolfSSL · wolfSSL | Medium6.3 |
| CVE-2026-11703 | Missing SNI/ALPN binding on stateful (session-ID) TLS session resumptionwolfSSL · wolfSSL | Medium6.0 |
| CVE-2026-55962 | TLS 1.3 post-handshake authentication: server accepts Finished without client Certificate/CertificateVerifywolfSSL · wolfSSL | Medium6.0 |
| CVE-2026-6092 | Encrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE_ENCRYPT_THEN_MAC is configuredwolfSSL · wolfSSL | Low2.1 |
| CVE-2026-6325 | Out-of-bounds write in SetSuitesHashSigAlgo on oversized signature algorithms listwolfSSL · wolfSSL | Low2.0 |
| CVE-2026-6329 | PKCS#12 MAC verification uses attacker-controlled comparison lengthwolfSSL · wolfSSL | Medium6.0 |
| CVE-2026-6330 | ML-KEM ARM64 NEON ciphertext comparison only compares half of the inputwolfSSL · wolfSSL | Medium6.3 |
| CVE-2026-6331 | HMAC zero-length tag forgery in EVP_DigestVerifyFinalwolfSSL · wolfSSL | Low2.1 |
| CVE-2026-6412 | Continued acceptance of SHA-1/MD5 digests in certificate processingwolfSSL · wolfSSL | Low2.3 |
| CVE-2026-6450 | CRL critical extension bypass in ParseCRL_ExtensionswolfSSL · wolfSSL | Low1.0 |
| CVE-2026-6678 | Integer underflow in wc_PKCS7_DecryptOri handling crafted Other Recipient InfowolfSSL · wolfSSL | Low1.0 |
| CVE-2026-6679 | DTLS 1.3 ACK serialization heap buffer overflow via integer truncationwolfSSL · wolfSSL | High8.8 |
| CVE-2026-6681 | PKCS#7 decode ignores caller output buffer size, writing past buffer boundswolfSSL · wolfSSL | Low1.0 |
| CVE-2026-6731 | X.509 name constraint bypass via Subject CN treated as a DNS namewolfSSL · wolfSSL | Medium6.0 |
| CVE-2026-7531 | Use-after-free in PQC hybrid key-share handlingwolfSSL · wolfSSL | Low2.3 |
| CVE-2026-10097 | ML-KEM-1024 x64 AVX2 incomplete cipher text comparison enables IND-CCA2 break and static private-key recoverywolfSSL · wolfSSL | High8.3 |
| CVE-2026-10512 | X25519 x86_64 assembly final reduction leaves non-canonical field elementwolfSSL · wolfSSL | Low2.3 |
| CVE-2026-10592 | Wildcard DNS SAN bypasses CA name-constraint checkswolfSSL · wolfSSL | Medium6.3 |
| CVE-2026-11310 | X.509 trust-chain bypass in wolfSSL_X509_verify_cert() via untrusted intermediate anchoringwolfSSL · wolfSSL | High8.7 |
| CVE-2026-12340 | Out-of-bounds heap read in SM2/SM3 certificate Subject Key Identifier computationwolfSSL · wolfSSL | Medium6.3 |
| CVE-2026-55958 | Renesas TSIP TLS 1.3 transcript buffer out-of-bounds write in tsip_StoreMessagewolfSSL · wolfSSL | High8.3 |
| CVE-2026-55960 | Un-negotiated Raw Public Key (RFC 7250) accepted in place of X.509, bypassing chain validationwolfSSL · wolfSSL | High8.2 |
| CVE-2026-55964 | Chain intermediate CA:TRUE without keyCertSign accepted as a signing CA (temporary CA exemption)wolfSSL · wolfSSL | Medium6.3 |
| CVE-2026-11999 | X.509 trust-chain bypass via path-depth exhaustion in wolfSSL_X509_verify_cert()wolfSSL · wolfSSL | High8.2 |
| CVE-2026-55967 | AES-GCM streaming APIs do not reject >64 GiB cumulative single messages, enabling counter wrap and keystream reusewolfSSL · wolfSSL | Low2.0 |
| CVE-2026-55961 | wolfSSL_PKCS7_verify() reports success for degenerate (certs-only) PKCS#7 with no signerwolfSSL · wolfSSL | High8.2 |
| CVE-2026-6091 | Partial-chain verification accepts untrusted intermediate as trust anchorwolfSSL · wolfSSL | Medium6.0 |
| CVE-2026-6291 | Bleichenbacher padding oracle in PKCS#7 KTRI RSA PKCS#1 v1.5 decryptionwolfSSL · wolfSSL | Medium6.0 |
| CVE-2026-6094 | Heap buffer overread in wc_PKCS7_DecodeEnvelopedData parsing crafted PKCS7 EnvelopedDatawolfSSL · wolfSSL | Medium6.3 |
| CVE-2026-0930 | Potential wolfSSHd Buffer out-of-bounds Read on Windows Handling Terminal ResizewolfSSL · wolfSSH | Low2.3 |
| CVE-2026-5477 | Prefix-substitution forgery via integer overflow in wolfCrypt CMACwolfSSL · wolfSSL | High8.2 |
| CVE-2026-5188 | Integer underflow in X.509 SAN parsing in wolfSSLwolfSSL · wolfSSL | Low2.3 |
| CVE-2026-5500 | Improper Validation of AES-GCM Authentication Tag Length in PKCS#7 Envelope Allows Authentication BypasswolfSSL · wolfSSL | High8.7 |
| CVE-2026-5501 | Improper Certificate Signature Verification in X.509 Chain Validation Allows Forged Leaf CertificateswolfSSL · wolfSSL | High8.6 |
| CVE-2026-5466 | wc_VerifyEccsiHash missing sanity checkwolfSSL · wolfSSL | High7.6 |