Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,813All CVEsplus 19,115 rejected
- 494Last 24 hours2,905 in the last 7 days
- 16,814Last 30 days1,543 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 2 | 0 | 0 | 0 | 2 | 18 |
| 2025 | 1 | 0 | 0 | 0 | 0 | 1 | 16 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 15 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 15 |
| 2022 | 0 | 1 | 0 | 0 | 0 | 1 | 15 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 14 |
| 2020 | 0 | 0 | 1 | 0 | 0 | 1 | 14 |
| 2019 | 0 | 1 | 5 | 0 | 0 | 6 | 13 |
| 2018 | 0 | 4 | 2 | 0 | 0 | 6 | 7 |
| 2017 | 1 | 0 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-109411 | Samba: access control bypass via vfs_ceph_rgw case-insensitive openSamba · Samba | High8.1 |
| CVE-2026-41035 | In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free. The victim must run…Samba · rsync | High7.4 |
| CVE-2024-58250 | The passprompt plugin in pppd in ppp before 2.5.2 mishandles privileges.Samba · ppp | Critical9.3 |
| CVE-2021-44142 | The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a…Samba · Samba | High8.8 |
| CVE-2020-14342 | It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject arbitrary commands. An attacker…samba · cifs-utils | Medium4.4 |
| CVE-2011-3585 | Multiple race conditions in the (1) mount.cifs and (2) umount.cifs programs in Samba 3.6 allow local users to cause a denial of service (mounting outage) via a…Samba · Samba | Medium4.7 |
| CVE-2019-14847 | A flaw was found in samba 4.0.0 before samba 4.9.15 and samba 4.10.x before 4.10.10. An attacker can crash AD DC LDAP server via dirsync resulting in denial of…Samba · samba | Medium4.9 |
| CVE-2019-14833 | A flaw was found in Samba, all versions starting samba 4.5.0 before samba 4.9.15, samba 4.10.10, samba 4.11.2, in the way it handles a user password change or…Samba · samba | Medium4.2 |
| CVE-2019-10218 | A flaw was found in the samba client, all samba versions before samba 4.11.2, 4.10.10 and 4.9.15, where a malicious server can supply a pathname to the client…Samba · samba | Medium5.3 |
| CVE-2019-10197 | A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set in the…SAMBA · samba | Medium6.5 |
| CVE-2018-16860 | A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to, excluding 4.8.12, 4.9.x up to, excluding 4.9.8 and 4.10.x up to, excluding…SAMBA · samba | High7.5 |
| CVE-2017-12151 | A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3. The connection…Samba · samba | High7.4 |
| CVE-2017-12150 | It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were…Samba · samba | High7.4 |
| CVE-2017-12163 | An information leak flaw was found in the way SMB1 protocol was implemented by Samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8. A malicious…Samba · Samba | Medium4.1 |
| CVE-2018-1057 | On a Samba 4 AD DC the LDAP server in all versions of Samba from 4.0.0 onwards incorrectly validates permissions to modify passwords over LDAP allowing…Samba · Samba | High8.8 |
| CVE-2018-1050 | All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external…Samba · Samba | Medium4.3 |
| CVE-2017-2619 | Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not…Samba · samba | High7.5 |
| CVE-2017-7494 | Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a…ExploitedSamba · samba | Critical9.8 |