Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,943All CVEsplus 19,118 rejected
- 382Last 24 hours2,817 in the last 7 days
- 16,800Last 30 days1,547 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 4 | 5 | 2 | 0 | 12 | 22 |
| 2025 | 0 | 3 | 0 | 0 | 0 | 3 | 10 |
| 2024 | 1 | 3 | 0 | 2 | 0 | 6 | 7 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2019 | 1 | 0 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-94057 | Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a…Exim · Exim | Medium4.0 |
| CVE-2026-94056 | Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory.Exim · Exim | High7.5 |
| CVE-2026-94055 | Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.Exim · Exim | Low3.7 |
| CVE-2026-94054 | Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.Exim · Exim | High7.0 |
| CVE-2026-66141 | Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe transport is mishandled.Exim · Exim | High7.4 |
| CVE-2026-66140 | Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because arguments related to…Exim · Exim | High8.4 |
| CVE-2026-48840 | Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of uninitialized stack memory values to a…Exim · Exim | Medium5.3 |
| CVE-2026-45185 | Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing path. It is triggered when a client…Exim · Exim | Critical9.8 |
| CVE-2026-40687 | In Exim before 4.99.2, when the SPA authentication driver is used with an adversarial SPA resource, there can be an out-of-bounds write that crashes the…Exim · Exim | Medium4.8 |
| CVE-2026-40686 | In Exim before 4.99.2, when utf8 operators are enabled, there is an out-of-bounds read if large UTF-8 trailing characters are present (malformed UTF-8 header…Exim · Exim | Low3.7 |
| CVE-2026-40685 | In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a JSON operator encounters malformed JSON in an untrusted…Exim · Exim | Medium6.5 |
| CVE-2026-40684 | In Exim before 4.99.2, on systems using musl libc (not glibc), an attacker can crash the connection instance when malformed DNS data is present in PTR records.…Exim · Exim | Medium5.9 |
| CVE-2025-67896 | Exim before 4.99.1, with certain non-default rate-limit configurations, allows a remote heap-based buffer overflow because database records are cast directly…Exim · Exim | High7.0 |
| CVE-2025-30232 | A use-after-free in Exim 4.96 through 4.98.1 could allow users (with command-line access) to escalate privileges.Exim · Exim | High8.1 |
| CVE-2025-26794 | Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL injection. (Resolving SQL injection requires an update to 4.99.1…Exim · Exim | High7.5 |
| CVE-2023-42119 | Exim dnsdb Out-Of-Bounds Read Information Disclosure VulnerabilityExim · Exim | Low3.1 |
| CVE-2023-42118 | Exim libspf2 Integer Underflow Remote Code Execution VulnerabilityExim · libspf2 | High7.5 |
| CVE-2023-42117 | Exim Improper Neutralization of Special Elements Remote Code Execution VulnerabilityExim · Exim | High8.1 |
| CVE-2023-42116 | Exim SMTP Challenge Stack-based Buffer Overflow Remote Code Execution VulnerabilityExim · Exim | High8.1 |
| CVE-2023-42115 | Exim AUTH Out-Of-Bounds Write Remote Code Execution VulnerabilityExim · Exim | Critical9.8 |
| CVE-2023-42114 | Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure VulnerabilityExim · Exim | Low3.7 |
| CVE-2019-10149 | A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead…Exploitedexim · exim | Critical9.0 |