Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,151All CVEsplus 19,119 rejected
- 490Last 24 hours2,789 in the last 7 days
- 16,901Last 30 days1,554 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 7 | 12 | 0 | 0 | 19 | 19 |
| Title | ||
|---|---|---|
| CVE-2026-115758 | SumatraPDF: TLS hostname validation disabled in `HttpGet()`sumatrapdfreader · sumatrapdf | High8.2 |
| CVE-2026-107802 | SumatraPDF — Windows command-line argument injection in AI selection-translatesumatrapdfreader · sumatrapdf | High7.1 |
| CVE-2026-107738 | SumatraPDF: Untrusted binary record offset used without lower-bound validationsumatrapdfreader · sumatrapdf | Medium6.8 |
| CVE-2026-107737 | SumatraPDF CHM `its://` signed index causes an out-of-bounds object lookupsumatrapdfreader · sumatrapdf | Medium5.7 |
| CVE-2026-107736 | SumatraPDF: stack buffer overflow while processing EXIF Orientation metadatasumatrapdfreader · sumatrapdf | Medium6.8 |
| CVE-2026-107735 | SumatraPDF: `sumatrapdfrestrict.ini` never revokes any permission (fail-open policy initialization)sumatrapdfreader · sumatrapdf | Medium5.4 |
| CVE-2026-107734 | SumatraPDF: SyncTeX Argument Injection in Inverse Search Enables Arbitrary Command Execution via External Editorssumatrapdfreader · sumatrapdf | High7.1 |
| CVE-2026-107733 | SumatraPDF: Null-pointer dereference in `CmdExec` when no document tab is opensumatrapdfreader · sumatrapdf | Medium6.8 |
| CVE-2026-107732 | SumatraPDF: Markup/command-link injection into UI notification textsumatrapdfreader · sumatrapdf | High8.4 |
| CVE-2026-107731 | SumatraPDF: LIT parser range-validation flaws cause invalid-pointer reads and denial of servicesumatrapdfreader · sumatrapdf | Medium5.5 |
| CVE-2026-107730 | SumatraPDF: Signed integer overflow in the LIT header parsing causes invalid-pointer readsumatrapdfreader · sumatrapdf | Medium5.5 |
| CVE-2026-107729 | SumatraPDF: Unsigned-to-signed hdrLen validation bypass in SumatraPDF MOBI parsing causes out-of-bounds readsumatrapdfreader · sumatrapdf | Medium5.5 |
| CVE-2026-26054 | SumatraPDF: Heap out-of-bounds read in MOBI header parser.sumatrapdfreader · sumatrapdf | Medium6.8 |
| CVE-2026-55586 | SumatraPDF: Heap out-of-bounds write in vendored CHMLib LZX Huffman table construction reachable from crafted CHM filessumatrapdfreader · sumatrapdf | Medium6.6 |
| CVE-2026-25961 | SumatraPDF Update MITM -> Arbitrary Code Executionsumatrapdfreader · sumatrapdf | High7.5 |
| CVE-2026-25920 | SumatraPDF has a heap out-of-bounds read in MOBI HuffDic decompressorsumatrapdfreader · sumatrapdf | Medium5.5 |
| CVE-2026-25880 | Untrusted Search Path in SumatraPDF Reader (explorer.exe on Windows)sumatrapdfreader · sumatrapdf | High7.8 |
| CVE-2026-23951 | SumatraPDF's Integer Underflow in PalmDbReader Leads to Crashsumatrapdfreader · sumatrapdf | Medium5.5 |
| CVE-2026-23512 | SumatraPDF has an Untrusted Search Path in sumatrapdf/src/AppTools.cppsumatrapdfreader · sumatrapdf | High8.6 |