Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,094All CVEsplus 19,119 rejected
- 503Last 24 hours2,831 in the last 7 days
- 16,881Last 30 days1,552 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 7 | 0 | 0 | 0 | 9 | 28 |
| 2025 | 1 | 13 | 5 | 0 | 0 | 19 | 19 |
| Title | ||
|---|---|---|
| CVE-2026-73218 | Cursor: Sandbox escape via launching privileged containerscursor · cursor | High7.7 |
| CVE-2026-73217 | Cursor: Sandbox escape via tampered Python virtual environmentscursor · cursor | High7.7 |
| CVE-2026-61613 | Cursor: Cloud Agent Browser Sandbox Escapecursor · cursor | High7.7 |
| CVE-2026-50548 | Cursor Desktop sandbox escape via agent-controlled working directorycursor · cursor | Critical9.3 |
| CVE-2026-50549 | Cursor Desktop sandbox escape via symlink and failed path canonicalizationcursor · cursor | Critical9.3 |
| CVE-2026-48124 | Cursor Desktop sandbox escape via Claude hook configurationcursor · cursor | High8.5 |
| CVE-2026-31854 | Cursor Affected by Arbitrary Code Execution via Prompt Injection and Whitelist Bypasscursor · cursor | High8.7 |
| CVE-2026-26268 | Cursor sandbox escape via Git hookscursor · cursor | High8.1 |
| CVE-2026-22708 | Cursor has a Terminal Tool Allowlist Bypass via Environment Variablescursor · cursor | High7.2 |
| CVE-2025-62354 | Improper neutralization of special elements used in an OS command ('command injection') in Cursor allows an unauthorized attacker to execute commands that are…cursor · cursor | Critical9.8 |
| CVE-2025-64110 | Cursor: Authentication Bypass Possible via New Cursorignore Writecursor · cursor | High8.7 |
| CVE-2025-64109 | Cursor CLI Beta: Command Injection via Untrusted MCP Configurationcursor · cursor | High8.8 |
| CVE-2025-64108 | Cursor's Sensitive File Modification can Lead to NTFS Path Quirkscursor · cursor | High8.8 |
| CVE-2025-64107 | Cursor is Vulnerable to Path Manipulation Using Backslashes on Windowscursor · cursor | High8.8 |
| CVE-2025-64106 | Cursor: Speedbump Modal Bypass in MCP Server Deep-Linkcursor · cursor | High8.8 |
| CVE-2025-59944 | Cursor IDE: Sensitive File Overwrite Bypass is Possiblecursor · cursor | High8.1 |
| CVE-2025-61593 | Cursor CLI Agent: Sensitive File Overwrite Bypasscursor · cursor | High7.1 |
| CVE-2025-61592 | Cursor CLI: Arbitrary Code Execution Possible through Permissive CLI Configcursor · cursor | High8.8 |
| CVE-2025-61591 | Cursor CLI's Cursor Agent MCP OAuth2 Communication is Vulnerable to Remote Code Executioncursor · cursor | High8.8 |
| CVE-2025-61590 | Cursor is vulnerable to RCE via .code-workspace files using Prompt Injectioncursor · cursor | High7.5 |
| CVE-2025-61589 | Cursor: Potential Information Leakage via Mermaid Diagramcursor · cursor | Medium5.9 |
| CVE-2025-9190 | TCC Bypass via misconfigured Node fuses in CursorCursor · Cursor | Medium4.8 |
| CVE-2025-54130 | Cursor Agent is vulnerable prompt injection via Editor Special Filescursor · cursor | High7.5 |
| CVE-2025-54135 | Cursor Agent is vulnerable to prompt injection via MCP Special Filescursor · cursor | High8.6 |
| CVE-2025-54136 | Cursor's Modification of MCP Server Definitions Bypasses Manual Re-approvalscursor · cursor | High7.2 |
| CVE-2025-54133 | Cursor's MCP Install Deeplink Does Not Show Arguments in its User-Dialogcursor · cursor | Medium5.3 |
| CVE-2025-54132 | Cursor's Mermaid Diagram Tool is Vulnerable to an Arbitrary Image Fetchcursor · cursor | Medium4.4 |
| CVE-2025-54131 | Cursor bypasses its allow list to execute arbitrary commandscursor · cursor | Medium6.4 |