Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,797All CVEsplus 19,115 rejected
- 485Last 24 hours2,893 in the last 7 days
- 16,838Last 30 days1,546 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 10 | 7 | 4 | 0 | 22 | 99 |
| 2025 | 1 | 15 | 9 | 2 | 0 | 27 | 77 |
| 2024 | 1 | 6 | 14 | 1 | 0 | 22 | 50 |
| 2023 | 2 | 3 | 13 | 6 | 0 | 24 | 28 |
| 2022 | 1 | 1 | 2 | 0 | 0 | 4 | 4 |
| Title | ||
|---|---|---|
| CVE-2026-16769 | RS9116W/SiWx917 plaintext pause encryption request causes DOSsilabs.com · WiseCnnect | High7.1 |
| CVE-2026-65936 | RS9116W/SiWx917 malformed packet with increased length field causes memory leaksilabs.com · WiseConnect | Medium5.3 |
| CVE-2026-65935 | Bypassing passkey entry in legacy pairingsilabs.com · WiseConnect | High7.6 |
| CVE-2026-65934 | BT122 plaintext pause encryption request causes DOSsilabs.com · BT122 | High7.1 |
| CVE-2026-65933 | BT122 malformed packet with increased length field causes memory leaksilabs.com · BT122 | Medium5.3 |
| CVE-2026-65932 | BT122 stops advertisingsilabs.com · BT122 | Medium5.3 |
| CVE-2026-19293 | SMP security requestsilabs.com · WiseConnect | High8.8 |
| CVE-2026-19292 | Bluetooth re-pairing with legitimate device can use lower security levelsilabs.com · WiseConnect | High8.8 |
| CVE-2026-19291 | Bluetooth re-pairing can use a lower security level than previoussilabs.com · WiseConnect | High8.8 |
| CVE-2026-16101 | forced re-pairing with already bonded devicesilabs.com · WiseConnect | High8.8 |
| CVE-2026-4930 | DPA Countermeasures weakening on Series 3 devicessilabs.com · Simplicity SDK | High7.1 |
| CVE-2026-8676 | An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and creating a new bond.silabs.com · Simplicity SDK | High8.8 |
| CVE-2025-14972 | Insufficient DPA countermeasure reseedingsilabs.com · Simplicity SDK | Medium4.1 |
| CVE-2025-11571 | Command Execution vulnerability in Simplicity Installersilabs.com · Simplicity Studio v5 | Low2.1 |
| CVE-2025-14055 | Integer underflow in Secure NCP hostsilabs.com · Simplicity SDK, Gecko SDK | Low2.4 |
| CVE-2025-14547 | ECJ-PAKE Integer Underflow Vulnerability in Silicon Labs PSA Crypto and SE Manager APIssilabs.com · Simplicity SDK | Low2.3 |
| CVE-2026-0619 | Integer Wraparound DoS in Silicon Labs Matter Implementationsilabs.com · Silicon Labs Matter | Medium6.0 |
| CVE-2025-11004 | Reflected XSS vulnerability in Simplicity Device Manager toolsilabs.com · Simplicity Device Manager | High7.5 |
| CVE-2025-7432 | DPA countermeasures not reseeded under certain conditionssilabs.com · Simplicity SDK | Low1.0 |
| CVE-2025-12131 | Truncated 802.15.4 packet leads to denial of servicesilabs.com · EmberZNet SDK | Medium5.3 |
| CVE-2025-7964 | Zigbee Router Denial of Servicesilabs.com · Silicon Labs Zigbee Stack | Critical9.2 |
| CVE-2025-10933 | Silicon Labs Z-Wave Protocol Controller Integer underflow vulnerability leads to out of bounds readsilabs.com · Z-Wave Protocol Controller | Medium5.3 |
| CVE-2025-12986 | Denial of Service Vulnerability in Silicon Labs WF200 and WGM160P Devicessilabs.com · Gecko SDK | Medium6.0 |
| CVE-2025-10285 | Simplcity Device Manager exposes NTLMv2 hashsilabs.com · Simplicity Studio V6 | High7.4 |
| CVE-2025-4321 | DoS in RS9116W-WiSeConnect L2CAP protocol due to reception of malformed packetssilabs.com · RS9116W | High7.1 |
| CVE-2025-10693 | Silicon Labs Z-Wave PIR Sensor Joins Network as Non-Securesilabs.com · Silicon Labs Z-Wave SDK | High7.6 |
| CVE-2025-8414 | Zigbee Green Power Host Buffer Overflow Vulnerabilitysilabs.com · Simplicity SDK | Critical9.4 |
| CVE-2025-7448 | Man in the middle (MitM) attack vulnerability in Wi-SUN librarysilabs.com · Wi-SUN Stack | High8.6 |
| CVE-2025-1394 | Denial of Service (DoS) vulnerabilitiey in Zigbee librarysilabs.com · Zigbee Stack | Medium5.9 |
| CVE-2025-1221 | DoS in Zigbee device due to heavy trafficsilabs.com · Zigbee | Medium5.9 |
| CVE-2025-2329 | High traffic causes corrupt SPI packets in OpenThread leading to denial of servicesilabs.com · OpenThread | Medium5.3 |
| CVE-2025-3873 | Buffer overflow in Si91x crypto APIssilabs.com · WiseConnect | Medium6.0 |
| CVE-2025-3301 | DPA Countermeasures Unavailable for Certain Cryptographic Operations on Series 2 Devicessilabs.com · Series 2 SoCs and associated modules | Low1.0 |
| CVE-2024-6351 | Malformed packet leads to denial of service in NWK/APS layersilabs.com · SiSDK | Medium4.3 |
| CVE-2024-9499 | Uncontrolled search path can lead to DLL hijacking in USBXpress Win 98SE Dev Kit installersilabs.com · USBXpress Win 98SE Dev Kit | High8.6 |
| CVE-2024-9498 | Uncontrolled search path can lead to DLL hijacking in USBXpress SDK installersilabs.com · USBXpress SDK | High8.6 |
| CVE-2024-9497 | Uncontrolled search path can lead to DLL hijacking in USBXpress 4 SDK installersilabs.com · USBXpress 4 SDK | High8.6 |
| CVE-2024-9496 | Uncontrolled search path can lead to DLL hijacking in USBXpress Dev Kit installersilabs.com · USBXpress Dev Kit | High8.6 |
| CVE-2024-9495 | Uncontrolled search path can lead to DLL hijacking in CP210x VCP Windows installersilabs.com · CP210x VCP Windows | High8.6 |
| CVE-2024-9494 | Uncontrolled search path can lead to DLL hijacking in CP210 VCP Win 2k installersilabs.com · CP210 VCP Win 2k | High8.6 |
| CVE-2024-9493 | Uncontrolled search path can lead to DLL hijacking in ToolStick installersilabs.com · ToolStick | High8.6 |
| CVE-2024-9492 | Uncontrolled search path can lead to DLL hijacking in Flash Programming Utility installersilabs.com · Flash Programming Utility | High8.6 |
| CVE-2024-9491 | Uncontrolled search path can lead to DLL hijacking in Configuration Wizard 2 installersilabs.com · Configuration Wizard 2 | High8.6 |
| CVE-2024-9490 | Uncontrolled search path can lead to DLL hijacking in Silicon Labs IDE installersilabs.com · Silicon Labs IDE (8-bit) | High8.6 |
| CVE-2024-7322 | Dos in ZigBee device due to unsolicited encrypted rejoin responsesilabs.com · EmberZNet | Medium5.8 |
| CVE-2024-6352 | Malformed packet leads to denial of service in APS layersilabs.com · SiSDK | Medium4.3 |
| CVE-2024-10106 | Ember ZNet buffer overflow in 'packet handoff' pluginsilabs.com · Ember ZNet SDK | Low3.7 |
| CVE-2024-6350 | EmberZNet malformed MAC layer packet leads to denial of servicesilabs.com · Simplicity SDK | Medium6.5 |
| CVE-2024-8361 | DoS caused due to wrong hash length returned for SHA2/224 algorithmsilabs.com · WiSeConnect SDK | High7.5 |
| CVE-2024-7139 | Denial of Service in Silicon Labs RS9116 Bluetooth SDKsilabs.com · RS9116 Bluetooth SDK | Medium6.5 |