Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,334All CVEsplus 19,141 rejected
- 443Last 24 hours2,721 in the last 7 days
- 16,923Last 30 days1,562 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 4 | 2 | 0 | 0 | 7 | 10 |
| 2025 | 0 | 1 | 2 | 0 | 0 | 3 | 3 |
| Title | ||
|---|---|---|
| CVE-2026-110930 | Codex Desktop for Windows does not correctly check quotation marks in project paths from Windows Explorer. If a user selects "Open project in ChatGPT" for an…OpenAI · Codex Desktop for Windows | High8.0 |
| CVE-2026-19592 | OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repository metadata without disabling the…OpenAI · Codex CLI | High7.3 |
| CVE-2026-19593 | OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and working-tree status when a user opened a workspace. If the workspace…OpenAI · Codex Desktop | Critical9.8 |
| CVE-2026-19591 | OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe because their…OpenAI · Codex CLI | High8.8 |
| CVE-2026-19590 | OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the repository's local…OpenAI · Codex Desktop | High7.3 |
| CVE-2026-14898 | The OpenAI Codex desktop app for macOS rendered remote images from Markdown in model responses. An attacker who could place an indirect prompt injection in…OpenAI · Codex desktop app for macOS | Medium6.5 |
| CVE-2026-11326 | OpenAI Atlas before 1.2025.288.15 exposed privileged browser APIs to web content on *.openai.com origins. A cross-site scripting vulnerability in…OpenAI · OpenAI Atlas | Medium6.0 |
| CVE-2025-59532 | Codex has sandbox bypass due to bug in path configuration logicopenai · codex | High8.6 |
| CVE-2025-54558 | OpenAI Codex CLI before 0.9.0 auto-approves ripgrep (aka rg) execution even with the --pre or --hostname-bin or --search-zip or -z flag.OpenAI · Codex CLI | Medium4.1 |
| CVE-2025-7021 | OpenAI Operator - API Spoofing through Locking Operator on FullScreenOpenAI · Operator | Medium6.9 |