Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,110All CVEsplus 18,875 rejected
- 774Last 24 hours3,264 in the last 7 days
- 17,389Last 30 days1,568 of them critical
- 1,767Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 14 | 28 | 3 | 0 | 46 | 231 |
| 2025 | 0 | 2 | 8 | 0 | 0 | 10 | 185 |
| 2024 | 0 | 0 | 6 | 1 | 0 | 7 | 175 |
| 2023 | 0 | 21 | 6 | 8 | 0 | 35 | 168 |
| 2022 | 0 | 83 | 30 | 0 | 0 | 113 | 133 |
| 2021 | 0 | 16 | 4 | 0 | 0 | 20 | 20 |
| Title | ||
|---|---|---|
| CVE-2026-43961 | Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code executionvim · vim | High7.8 |
| CVE-2026-73073 | Vim: Arbitrary Ex Command Execution in C Omni-Completionvim · vim | High7.1 |
| CVE-2026-73078 | Vim: Arbitrary Code Execution via Netrw Menu Constructionvim · vim | High8.6 |
| CVE-2026-73077 | Vim: Arbitrary Code Execution via Shell Keyword Lookupvim · vim | High8.4 |
| CVE-2026-73076 | Vim: Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim`vim · vim | High8.4 |
| CVE-2026-73075 | Vim: Out-of-bounds Access in Popup Opacity Handlingvim · vim | Medium4.6 |
| CVE-2026-73074 | Vim: Heap Buffer Overflow in Text Property Handlingvim · vim | High7.1 |
| CVE-2026-73072 | Vim: Heap Buffer Overflow when Loading a Spell Filevim · vim | High8.5 |
| CVE-2026-73071 | Vim: Use-after-free in JSON Decodingvim · vim | Low3.3 |
| CVE-2026-73070 | Vim: Stack Buffer Overflow in the Vim Socket Servervim · vim | Medium6.8 |
| CVE-2026-59856 | Vim: Arbitrary Code Execution via PHP Omni-Completionvim · vim | High8.4 |
| CVE-2026-59858 | Vim: Arbitrary Code Execution via C Omni-Completionvim · vim | High8.4 |
| CVE-2026-59857 | Vim: Out-of-bounds Write in SAL Soundfoldingvim · vim | Medium5.6 |
| CVE-2026-55693 | Vim: Out-of-bounds Write in Spell File Word Countvim · vim | Medium5.7 |
| CVE-2026-55892 | Vim: Out-of-bounds Write in Spell File Prefix Dumpvim · vim | Medium5.5 |
| CVE-2026-55895 | Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filenamevim · vim | Medium5.7 |
| CVE-2026-57451 | Vim: Out-of-bounds Read in Text Property Countvim · vim | Medium5.3 |
| CVE-2026-57452 | Vim: Out-of-bounds Read with libsodium-encrypted Filesvim · vim | Medium5.5 |
| CVE-2026-57453 | Vim: PowerShell Command Injection via Unescaped Filename in zip.vim Extractionvim · vim | Medium6.5 |
| CVE-2026-57454 | Vim: Out-of-bounds Read with Text Propertiesvim · vim | Medium6.8 |
| CVE-2026-57455 | Vim: Stack out-of-bounds write in `spell_soundfold_sofo()` via an over-length `soundfold()` argumentvim · vim | Medium4.0 |
| CVE-2026-57456 | Vim: Arbitrary Code Execution via Python Omni-Completion Docstringsvim · vim | High8.4 |
| CVE-2026-52860 | Vim: Arbitrary Code Execution via Python Omni-Completionvim · vim | High7.5 |
| CVE-2026-52859 | Vim: Out-of-bounds Read in Terminal Screen Snapshotvim · vim | Medium6.9 |
| CVE-2026-52858 | Vim: Arbitrary Code Execution via Python Omni-Completionvim · vim | High7.3 |
| CVE-2026-47162 | Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory namevim · vim | High7.3 |
| CVE-2026-47167 | Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regexvim · vim | Medium5.1 |
| CVE-2026-46483 | Vim: Command injection in tar#Vimuntar via missing shellescape {special} flagvim · vim | Low3.6 |
| CVE-2026-45130 | Vim: Heap Buffer Overflow in spell file loadingvim · vim | Medium6.6 |
| CVE-2026-44656 | Vim: OS Command Injection via 'path' completionvim · vim | Medium4.6 |
| CVE-2026-42307 | Vim: OS Command Injection in netrwvim · vim | Medium4.4 |
| CVE-2026-41411 | Vim: Command injection via backtick expansion in tag filenamesvim · vim | Medium6.6 |
| CVE-2026-39881 | Vim Ex command injection in Vims NetBeans integrationvim · vim | Medium5.0 |
| CVE-2026-35177 | Path traversal issue with zip.vim in Vimvim · vim | Medium4.1 |
| CVE-2026-34982 | Vim modeline bypass via various options affects Vim < 9.2.0276vim · vim | High8.2 |
| CVE-2026-34714 | Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injection occurs…Vim · Vim | Critical9.2 |
| CVE-2026-33412 | Vim affected by Command injection via newline in glob()vim · vim | Medium5.6 |
| CVE-2026-32249 | NFA regex engine NULL pointer dereference affects Vim < 9.2.0137vim · vim | Medium5.3 |
| CVE-2026-28422 | Vim has stack-buffer-overflow in build_stl_str_hl()vim · vim | Low2.2 |
| CVE-2026-28421 | Vim has a heap-buffer-overflow and a segmentation faultvim · vim | Medium5.3 |
| CVE-2026-28420 | Vim has Heap-based Buffer Overflow and OOB Read in :terminalvim · vim | Medium4.4 |
| CVE-2026-28419 | Vim has Heap-based Buffer Underflow in Emacs tags parsingvim · vim | Medium5.3 |
| CVE-2026-28418 | Vim has Heap-based Buffer Overflow in Emacs tags parsingvim · vim | Medium4.4 |
| CVE-2026-28417 | Vim has OS Command Injection in netrwvim · vim | Medium4.4 |
| CVE-2026-26269 | Vim has a Netbeans specialKeys Stack Buffer Overflowvim · vim | Medium5.4 |
| CVE-2026-25749 | Heap Overflow in Vimvim · vim | Medium6.6 |
| CVE-2025-66476 | Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerabilityvim · vim | High7.8 |
| CVE-2025-55157 | Vim heap use-after-free vulnerability when processing recursive tuple data typesvim · vim | Medium6.9 |
| CVE-2025-55158 | Vim double-free vulnerability during Vim9 script import operationsvim · vim | Medium6.9 |
| CVE-2025-53906 | Vim has path traversal issue with zip.vim and special crafted zip archivesvim · vim | Medium4.1 |