Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,955All CVEsplus 19,141 rejected
- 329Last 24 hours3,207 in the last 7 days
- 16,997Last 30 days1,575 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 8 | 1 | 0 | 0 | 9 | 9 |
| Title | ||
|---|---|---|
| CVE-2026-124317 | libexpat through 2.10.0 Out-of-Bounds Read via unknown_toUtf8 and unknown_toUtf16libexpat · libexpat | Medium6.3 |
| CVE-2026-118370 | libexpat through 2.9.0 Integer Overflow in storeAtts via attIndex and nPrefixeslibexpat · libexpat | High8.2 |
| CVE-2026-117610 | libexpat through 2.9.0 NULL Pointer Dereference via External Entity Subparserlibexpat · libexpat | High8.2 |
| CVE-2026-115506 | libexpat through 2.9.0 Denial of Service via Billion Laughs Detection DelayPublic exploitlibexpat · libexpat | High8.7 |
| CVE-2026-113351 | libexpat 2.7.2 through 2.9.0 Denial of Service via XML_ParserResetlibexpat · libexpat | High8.2 |
| CVE-2026-77214 | libexpat Heap Buffer Over-read in xmlparse.c via XML_ParseBufferlibexpat · libexpat | High8.3 |
| CVE-2026-102633 | libexpat 2.7.2 through 2.8.5 Integer Overflow in expat_realloclibexpat · libexpat | High8.2 |
| CVE-2026-93990 | Expat before 2.8.5 Malformed UTF-16 Acceptance via Unchecked Surrogatelibexpat · libexpat | High8.7 |
| CVE-2026-76641 | Expat Out-of-Bounds Read via dtdCopylibexpat · libexpat | High8.7 |