Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read just now.
At a glance
Published CVEs; rejected ones are not counted.
- 400,775All CVEsplus 19,114 rejected
- 477Last 24 hours2,885 in the last 7 days
- 16,915Last 30 days1,562 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 1 | 4 | 0 | 0 | 5 | 85 |
| 2025 | 1 | 0 | 6 | 4 | 0 | 11 | 80 |
| 2024 | 0 | 3 | 7 | 2 | 0 | 12 | 69 |
| 2023 | 1 | 4 | 12 | 4 | 0 | 21 | 57 |
| 2022 | 0 | 11 | 6 | 0 | 0 | 17 | 36 |
| 2021 | 0 | 3 | 10 | 5 | 0 | 18 | 19 |
| 2020 | 0 | 0 | 1 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-45056 | Matrix Rust SDK: Sender-binding gaps in to-device and room-key attributionmatrix-org · matrix-rust-sdk | Medium6.9 |
| CVE-2026-45057 | matrix-sdk-ui: Incomplete edit validationmatrix-org · matrix-sdk-ui | Medium4.9 |
| CVE-2026-63097 | Dendrite 0.13.8 syncapi /context Endpoint Post-Leave State Exposurematrix-org · dendrite | Medium5.3 |
| CVE-2026-63096 | Dendrite 0.13.8 SSRF via Unauthenticated Legacy Media Download Endpointmatrix-org · dendrite | Medium6.9 |
| CVE-2026-63095 | Dendrite 0.13.8 Improper Authorization via POST account/3pid/delete Endpointmatrix-org · dendrite | High7.1 |
| CVE-2025-66622 | matrix-sdk-base is vulnerable to DoS via custom m.room.join_rules event valuesmatrix-org · matrix-rust-sdk | Low1.3 |
| CVE-2025-59160 | matrix-js-sdk has insufficient validation when considering a room to be upgraded by anothermatrix-org · matrix-js-sdk | Low2.7 |
| CVE-2025-59047 | matrix-sdk-base has panic in the `RoomMember::normalized_power_level()` methodmatrix-org · matrix-rust-sdk | Low2.7 |
| CVE-2025-53549 | Matrix Rust SDK allows SQL injection in the EventCache implementationmatrix-org · matrix-rust-sdk | Medium5.2 |
| CVE-2025-48937 | matrix-sdk-crypto vulnerable to sender of encrypted events being spoofed by homeserver administratormatrix-org · matrix-rust-sdk | Medium4.9 |
| CVE-2025-27155 | In-memory stored Cross-site scripting (XSS) vulnerability in pineconesimmatrix-org · pinecone | Medium6.1 |
| CVE-2025-27146 | Matrix IRC Bridge allows IRC command injection to own puppeted usermatrix-org · matrix-appservice-irc | Low2.7 |
| CVE-2025-23197 | matrix-hookshot has a Potential Denial of Service when Hookshot is configured with GitHub supportmatrix-org · matrix-hookshot | Medium6.5 |
| CVE-2025-24024 | Mjolnir v1.9.0 accepts commands from any roommatrix-org · mjolnir | Critical9.1 |
| CVE-2024-52594 | Server-Side Request Forgery (SSRF) on redirects and federation in gomatrixserverlibmatrix-org · gomatrixserverlib | Medium4.3 |
| CVE-2024-52813 | matrix-sdk-crypto missing facility to signal rotation of a verified cryptographic identitymatrix-org · matrix-rust-sdk | Medium4.3 |
| CVE-2024-52505 | matrix-appservice-irc allows IRC Command injection in provisioning APImatrix-org · matrix-appservice-irc | Medium5.4 |
| CVE-2024-50336 | matrix-js-sdk has insufficient MXC URI validation which allows client-side path traversalmatrix-org · matrix-js-sdk | Medium5.3 |
| CVE-2024-47824 | Malicious homeservers can steal message keys when the matrix-react-sdk user invites another user to a roommatrix-org · matrix-react-sdk | High8.7 |
| CVE-2024-47080 | matrix-js-sdk keys sent via `sendSharedHistoryKeys` vulnerable to interception by malicious homeservermatrix-org · matrix-js-sdk | High8.7 |
| CVE-2024-42369 | A room with itself as a its predecessor will freeze matrix-js-sdkmatrix-org · matrix-js-sdk | Medium4.1 |
| CVE-2024-42347 | URL preview setting for a room is controllable by the homeserver in matrix-react-sdkmatrix-org · matrix-react-sdk | High7.7 |
| CVE-2024-40648 | `UserIdentity::is_verified` not checking verification status of own user identity while performing the check in matrix-rust-sdkmatrix-org · matrix-rust-sdk | Medium5.4 |
| CVE-2024-40640 | Usage of non-constant time base64 decoder could lead to leakage of secret key material in vodozemacmatrix-org · vodozemac | Low2.9 |
| CVE-2024-39691 | Malicious Matrix homeserver can leak truncated message content of messages it shouldn't have access tomatrix-org · matrix-appservice-irc | Medium4.3 |
| CVE-2024-34353 | matrix-sdk-crypto contains a log exposure of private key of the server-side key backupmatrix-org · matrix-sdk-crypto | Medium5.5 |
| CVE-2024-34063 | Degraded secret zeroization capabilities in vodozemacmatrix-org · vodozemac | Low2.5 |
| CVE-2024-32000 | Truncated content of messages can be leaked from matrix-appservice-ircmatrix-org · matrix-appservice-irc | Medium4.3 |
| CVE-2023-43796 | Synapse vulnerable to leak of remote user device informationmatrix-org · synapse | Medium5.3 |
| CVE-2023-45129 | matrix-synapse vulnerable to denial of service due to malicious server ACL eventsmatrix-org · synapse | Medium4.9 |
| CVE-2023-43656 | Sandbox escape for instances that have enabled transformation functions in matrix-hookshotmatrix-org · matrix-hookshot | Medium5.6 |
| CVE-2023-41335 | Temporary storage of plaintext passwords during password changes in matrix synapsematrix-org · synapse | Low3.7 |
| CVE-2023-42453 | Improper validation of receipts allows forged read receipts in matrix synapsematrix-org · synapse | Low3.1 |
| CVE-2023-38700 | matrix-appservice-irc events can be crafted to leak parts of targeted messages from other bridged roomsmatrix-org · matrix-appservice-irc | Low3.5 |
| CVE-2023-38691 | matrix-appservice-bridge doesn't verify the sub parameter of an openId token exhange, allowing unauthorized access to provisioning APIsmatrix-org · matrix-appservice-bridge | Medium5.0 |
| CVE-2023-38690 | matrix-appservice-irc IRC command injection via admin commands containing newlinesmatrix-org · matrix-appservice-irc | Medium5.8 |
| CVE-2023-38686 | Sydent does not verify email server certificatesmatrix-org · sydent | Critical9.3 |
| CVE-2023-37259 | Cross site scripting in Export Chat featurematrix-org · matrix-react-sdk | Medium6.1 |
| CVE-2023-32683 | URL deny list bypass via oEmbed and image URLs when generating previews in Synapsematrix-org · synapse | Low3.5 |
| CVE-2023-32682 | Improper checks for deactivated users during login in synapsematrix-org · synapse | Medium5.4 |
| CVE-2022-39374 | Synapse Denial of service due to incorrect application of event authorization rules during state resolutionmatrix-org · synapse | Medium6.5 |
| CVE-2022-39335 | Synapse does not apply enough checks to servers requesting auth events of events in a roommatrix-org · synapse | Medium5.0 |
| CVE-2023-32323 | Synapse Outgoing federation to specific hosts can be disabled by sending malicious invitesmatrix-org · synapse | Medium5.0 |
| CVE-2023-30609 | matrix-react-sdk vulnerable to HTML injection in search results via plaintext message highlightingmatrix-org · matrix-react-sdk | Medium5.4 |
| CVE-2023-29529 | matrix-js-sdk vulnerable to invisible eavesdropping in group callsmatrix-org · matrix-js-sdk | Medium5.0 |
| CVE-2022-36060 | Prototype pollution in matrix-react-sdkmatrix-org · matrix-react-sdk | High8.2 |
| CVE-2023-28103 | Prototype pollution in matrix-react-sdkmatrix-org · matrix-react-sdk | High8.2 |
| CVE-2023-28427 | Prototype pollution in matrix-js-sdkmatrix-org · matrix-js-sdk | High8.2 |
| CVE-2022-36059 | Prototype pollution in matrix-js-sdkmatrix-org · matrix-js-sdk | High8.2 |
| CVE-2022-41952 | Uncontrolled Resource Consumption in Matrix Synapsematrix-org · synapse | Medium6.5 |