Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 2 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 403,085All CVEsplus 19,156 rejected
- 722Last 24 hours3,470 in the last 7 days
- 17,249Last 30 days1,546 of them critical
- 1,773Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 5 | 32 | 23 | 2 | 0 | 62 | 92 |
| 2025 | 5 | 14 | 10 | 0 | 0 | 29 | 30 |
| 2024 | 0 | 0 | 1 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-88708 | An off-by-one error in certain ASUS Router firmware allows an unauthenticated nearby user to send a packet with a specific header length, potentially…ASUS · Router firmware | Medium5.3 |
| CVE-2026-88707 | An out-of-bounds write in certain ASUS Router firmware allows an unauthenticated nearby user to send an HTTP request containing parameters that exceed the…ASUS · Router firmware | High7.1 |
| CVE-2026-88710 | Improper neutralization of special elements used in an OS command in certain ASUS Router firmware allows an unauthenticated nearby user to trigger a chain of…ASUS · Router firmware | High8.7 |
| CVE-2026-88709 | Improper neutralization of special elements used in an OS command in certain ASUS Router firmware allows an user with physical access to insert a USB device…ASUS · Router firmware | High7.0 |
| CVE-2026-84729 | Out-of-bounds write in certain ASUS Router firmware allow an unauthenticated nearby attacker to write data beyond the intended buffer or potentially cause a…ASUS · Router firmware | High7.2 |
| CVE-2026-84730 | Stack-based buffer overflow in certain ASUS Router firmware allows an unauthenticated nearby attacker to execute arbitrary commands with root privileges via a…ASUS · Router firmware | High8.7 |
| CVE-2026-112116 | An exposed IOCTL with insufficient access control in ASUS System Control Interface allows a local, low-privileged user to read and write arbitrary physical…ASUS · System Control Interface | High8.5 |
| CVE-2026-110464 | Missing authorization in ASUS Armoury Crate allows a local attacker to write content into a specific file or registry location with Local System privileges, or…ASUS · Armoury Crate | Medium6.9 |
| CVE-2026-88781 | Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O…ASUS · motherboards firmware | Medium6.8 |
| CVE-2026-75775 | Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows remote user to execute arbitrary commands with root privileges…ASUS · Router | High7.7 |
| CVE-2026-93489 | Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge an access ticket, subsequently enabling…ASUS · Router | High8.7 |
| CVE-2026-75779 | Improper Neutralization of Special Elements used in an OS Command (“OS Command Injection”) and Cross-Site Request Forgery (CSRF) in an ASUS router model allow…ASUS · Router | High8.6 |
| CVE-2026-75753 | Missing Authentication for a Critical Function in certain ASUS routers allows an unauthorized nearby user to send specific commands via HTTP requests, causing…ASUS · Router | Medium5.3 |
| CVE-2026-17518 | Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrupt device operations and cause a denial…ASUS · Router | High8.2 |
| CVE-2026-102438 | An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges via replacement of…ASUS · Armoury Crate | High8.5 |
| CVE-2026-14911 | Improper Neutralization of Input During Web Page Generation (“Cross-site Scripting”) in ASUS router modules allows a remote attacker to read DOM information,…ASUS · Router | Critical9.3 |
| CVE-2026-19396 | A predictable seed in the pseudo-random number generator (PRNG) in the IFTTT pairing token generation of the ASUS RT-BE57 router allows an unauthenticated…ASUS · Router | High7.7 |
| CVE-2026-19386 | A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code via a crafted configuration file upload…ASUS · Router | Critical9.3 |
| CVE-2026-16528 | Insertion of Sensitive Information into Log File in certain ASUS router models allows a remote authenticated attacker to obtain DDNS credentials from the…ASUS · Router | High8.4 |
| CVE-2026-13313 | An Active Debug Code vulnerability in certain ASUS router models allows a remote authenticated user, via a crafted HTTP request, to bypass security mechanisms…ASUS · Router | High8.9 |
| CVE-2026-14157 | Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands via a crafted file…ASUS · Router | Critical9.4 |
| CVE-2026-93495 | Improper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary memory by inserting a specially crafted…ASUS · Motherboard(PRIME Z390-A ) | High7.0 |
| CVE-2026-19397 | Missing authentication for a critical function in ASUS Control Center Express Agent allows an unauthenticated nearby user to control the host via a direct…ASUS · Control Center Express Agent | High7.7 |
| CVE-2026-12962 | A Permissive Cross-domain Security Policy with Untrusted Domains in Armoury Crate allows a remote user to obtain a local user's NTLM hash by convincing the…ASUS · Armoury Crate | Medium5.3 |
| CVE-2026-18023 | Sensitive Information in Resource Not Removed Before Reuse in ASUS Armoury Crate driver allows a local user to disclose sensitive information from…ASUS · Armoury Crate | Medium5.7 |
| CVE-2026-16003 | Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to add an arbitrary process identifier to the driver's whitelist via…ASUS · Armoury Crate | Low2.0 |
| CVE-2026-16004 | Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to read and write arbitrary PCI/PCIe configuration space via crafted…ASUS · Armoury Crate | Medium5.9 |
| CVE-2026-16005 | Release of Invalid Pointer or Reference in Armoury Crate driver allows a local user to free arbitrary memory via a crafted IOCTL request by bypassing the…ASUS · Armoury Crate | Medium5.8 |
| CVE-2026-16006 | Exposure of Sensitive System Information to an Unauthorized Control Sphere in Armoury Crate driver allows a local user to obtain kernel virtual addresses via a…ASUS · Armoury Crate | Medium5.7 |
| CVE-2026-75808 | Allocation of Resources Without Limits or Throttling in ASUS Armoury Crate allows a local user to cause a denial-of-service condition through system memory…ASUS · Armoury Crate | Medium5.7 |
| CVE-2026-75809 | Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and disabling device functionality by…ASUS · Armoury Crate | Medium5.9 |
| CVE-2026-75810 | Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a brief system stall by bypassing driver authentication and sending…ASUS · Armoury Crate | Medium5.7 |
| CVE-2026-75811 | Improper Restriction of Software Interfaces to Hardware Features in ASUS Armoury Crate allows a local user to modify hardware configuration settings and…ASUS · Armoury Crate | Medium5.8 |
| CVE-2026-75754 | Missing Authentication for Critical Function, Server-Side Request Forgery (SSRF), and Use of Hard-coded Credentials in ASUS Control Center allow an…ASUS · Control Center Enterprise (ACC) | Critical10.0 |
| CVE-2026-19398 | An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local administrator to cause a system crash (BSOD) or BIOS…ASUS · FA507NV | Medium6.8 |
| CVE-2026-8917 | Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a local attacker to write a specific…ASUS · GPU Tweak III | High8.4 |
| CVE-2026-16727 | Concurrent Execution using Shared Resource with Improper Synchronization (“Race Condition”) in ASUS Armoury Crate allows a local user to execute arbitrary code…ASUS · Armoury Crate | High7.3 |
| CVE-2019-25764 | **UNSUPPORTED WHEN ASSIGNED** Exposed IOCTL with Insufficient Access Control in the ASUS AURA SYNC driver allows a local user to bypass the driver's…ASUS · AURA SYNC | High7.3 |
| CVE-2026-13385 | An Improper Validation of Integrity Check Value and Improper Certificate Validation in certain ASUS router models allows a remote man-in-the-middle(MITM) user…ASUS · Router | Critical9.5 |
| CVE-2026-15029 | Untrusted Pointer Dereference in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to…ASUS · System Control Interface v3 | High8.4 |
| CVE-2026-15030 | Out-of-bounds Read in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to read memory…ASUS · System Control Interface v3 | Medium5.6 |
| CVE-2026-13585 | Allocation of Resources Without Limits and Throttling and Sensitive Information in Resource Not Removed Before Reuse in the ASUS System Control Interface…ASUS · System Control Interface v3 | High8.2 |
| CVE-2026-8920 | Improper Restriction of Communication Channel to Intended Endpoints and External Control of File Name or Path in Aura Wallpaper Service allow a local user to…ASUS · Aura Wallpaper Service | High8.5 |
| CVE-2026-8919 | Permissive Cross-domain Security Policy with Untrusted Domains in ASUS GameSDK allows a remote user to obtain a local user’s NTLM hash by convincing the user…ASUS · GameSDK | High7.2 |
| CVE-2026-11851 | Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") in the web management interface of certain ASUS router models allows a…ASUS · Router | Medium5.9 |
| CVE-2022-4989 | ** UNSUPPORTED WHEN ASSIGNED ** Improper Validation of Specified Quantity in Input in the ASUS AI Suite 3 driver allows a local user to access unintended…ASUS · AI Suite 3 | High8.5 |
| CVE-2022-4990 | ** UNSUPPORTED WHEN ASSIGNED ** Improper Validation of Specified Quantity in Input in the ASUS AI Suite 3 driver allows a local user to bypass security…ASUS · AI Suite 3 | High7.3 |
| CVE-2026-8921 | External Control of File Name or Path vulnerability in ASUS Business Manager allows a local user to execute arbitrary code with SYSTEM privileges via a…ASUS · ASUS Business Manager | High8.5 |
| CVE-2026-12960 | An Improper Export of Android Application Components vulnerability in ASUS Router App allows a third-party application on the same device to send a crafted…ASUS · Router app | Medium6.0 |
| CVE-2026-8918 | A permissive list of allowed inputs in ASUS Armoury Crate allows a local administrator to perform arbitrary memory read/write operations or cause a system…ASUS · Armoury Crate | High7.1 |