Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,060All CVEsplus 19,119 rejected
- 493Last 24 hours2,912 in the last 7 days
- 16,873Last 30 days1,544 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 8 | 4 | 1 | 0 | 14 | 15 |
| 2025 | 0 | 1 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-116197 | Contrast 1.21.0 before 1.25.0 Credential Leak via imagepuller Wildcard Registry Selectionedgelesssys · contrast | Low2.1 |
| CVE-2026-109359 | Contrast 1.8.0 before 1.24.1 Mesh CA Key Cross-Manifest Exposure via Peer Recoveryedgelesssys · contrast | High8.7 |
| CVE-2026-109358 | Edgeless Systems Contrast 1.8.0 before 1.24.1 World-Writable Containerd Config Privilege Escalationedgelesssys · contrast | High8.5 |
| CVE-2026-100837 | Edgeless Systems Contrast through 1.20.0 Credential Leak via Registry Suffix Matchingedgelesssys · contrast | Medium6.3 |
| CVE-2026-100836 | Edgeless Systems Contrast through 1.20.0 Denial of Service via ciphertextContaineredgelesssys · contrast | Medium5.3 |
| CVE-2026-100839 | Contrast before 1.18.0 AML Injection Remote Code Executionedgelesssys · contrast | High8.4 |
| CVE-2026-100838 | Contrast before 1.19.1 CopyFile Policy Symlink Subversionedgelesssys · contrast | High8.6 |
| CVE-2026-100835 | Contrast before 1.16.0 Remote Attestation Relay Attackedgelesssys · contrast | Critical9.1 |
| CVE-2026-100833 | Contrast before 1.23.1 Image Substitution via Policy Generationedgelesssys · contrast | High8.6 |
| CVE-2025-71426 | Contrast before 1.4.1 Coordinator Impersonation via Unauthenticated Recoveryedgelesssys · contrast | High7.1 |
| CVE-2025-71425 | Contrast before 1.8.1 Information Disclosure via Loggingedgelesssys · contrast | High8.5 |
| CVE-2025-71424 | Edgeless Systems Contrast before 1.9.1 Insecure Volume Mountedgelesssys · contrast | Medium5.1 |
| CVE-2025-71423 | Edgelesssys Contrast before 1.12.2 Workload Secrets Information Disclosureedgelesssys · contrast | High8.5 |
| CVE-2025-71422 | Contrast before 1.12.1 Insecure LUKS2 Persistent Storageedgelesssys · contrast | Medium6.9 |
| CVE-2025-58356 | Constellation allows insecure use of LUKS2 persistent storage partitionsedgelesssys · constellation | High8.3 |