Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,736All CVEsplus 19,141 rejected
- 659Last 24 hours3,036 in the last 7 days
- 17,189Last 30 days1,611 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 4 | 2 | 2 | 0 | 8 | 11 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| 2024 | 0 | 1 | 0 | 0 | 0 | 1 | 3 |
| 2023 | 0 | 0 | 2 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-69249 | python-cryptography: Duplicate self-signed intermediates can cause exponential path-buildingpyca · cryptography | High8.7 |
| CVE-2026-69248 | python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtreespyca · cryptography | Medium6.9 |
| CVE-2026-69247 | cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timingpyca · cryptography | High8.2 |
| CVE-2026-39892 | cryptography has a buffer overflow if non-contiguous buffers were passed to APIspyca · cryptography | Medium6.9 |
| CVE-2026-34073 | cryptography has incomplete DNS name constraint enforcement on peer namespyca · cryptography | Low1.7 |
| CVE-2026-27459 | pyOpenSSL DTLS cookie callback buffer overflowpyca · pyopenssl | High7.2 |
| CVE-2026-27448 | pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callbackpyca · pyopenssl | Low1.7 |
| CVE-2026-26007 | cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curvespyca · cryptography | High8.2 |
| CVE-2024-26130 | cryptography NULL pointer deference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash overridepyca · cryptography | High7.5 |
| CVE-2023-49083 | cryptography vulnerable to NULL-dereference when loading PKCS7 certificatespyca · cryptography | Medium5.9 |
| CVE-2023-23931 | Cipher.update_into can corrupt memory in pyca cryptographypyca · cryptography | Medium4.8 |