Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 406,426All CVEsplus 19,170 rejected
- 774Last 24 hours5,189 in the last 7 days
- 16,938Last 30 days1,482 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 458 | 1,763 | 1,596 | 155 | 0 | 3,972 | 7,447 |
| 2025 | 3 | 104 | 86 | 2 | 0 | 195 | 3,475 |
| 2024 | 11 | 185 | 63 | 2 | 0 | 261 | 3,280 |
| 2023 | 6 | 176 | 114 | 1 | 0 | 297 | 3,019 |
| 2022 | 15 | 242 | 100 | 0 | 0 | 357 | 2,722 |
| 2021 | 33 | 234 | 107 | 1 | 0 | 375 | 2,365 |
| 2020 | 19 | 135 | 107 | 1 | 0 | 262 | 1,990 |
| 2019 | 13 | 145 | 198 | 2 | 0 | 358 | 1,728 |
| 2018 | 5 | 72 | 85 | 1 | 0 | 163 | 1,370 |
| 2017 | 10 | 68 | 84 | 2 | 0 | 164 | 1,207 |
| 2016 | 19 | 94 | 57 | 1 | 0 | 171 | 1,043 |
| 2015 | 3 | 101 | 74 | 0 | 0 | 178 | 872 |
| 2014 | 0 | 82 | 32 | 2 | 0 | 116 | 694 |
| 2013 | 0 | 130 | 85 | 4 | 0 | 219 | 578 |
| 2012 | 0 | 117 | 77 | 0 | 0 | 194 | 359 |
| 2011 | 0 | 64 | 100 | 1 | 0 | 165 | 165 |
| Title | ||
|---|---|---|
| CVE-2026-126899 | Use after free in Elements in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the…Google · Chrome | High8.8 |
| CVE-2026-126920 | Information leak in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium…Google · Chrome | Medium4.3 |
| CVE-2026-126860 | Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to potentially execute…Google · Chrome | High8.8 |
| CVE-2026-126890 | Out of bounds read in Media in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…Google · Chrome | High8.8 |
| CVE-2026-126913 | Out of bounds read in Compositing in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to read memory…Google · Chrome | Low3.4 |
| CVE-2026-126921 | Use after free in Accessibility in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…Google · Chrome | High8.8 |
| CVE-2026-126868 | Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted…Google · Chrome | High8.8 |
| CVE-2026-126902 | Incorrect reference resolution in Browser in Google Chrome on on Mac prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process…Google · Chrome | High7.5 |
| CVE-2026-126841 | Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to read memory outside…Google · Chrome | Low3.1 |
| CVE-2026-126850 | Incorrect authorization in SiteIsolation in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer…Google · Chrome | Medium5.3 |
| CVE-2026-126852 | Use after free in MediaStream in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…Google · Chrome | High8.8 |
| CVE-2026-126901 | Use after free in PDF in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…Google · Chrome | High8.8 |
| CVE-2026-126849 | Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted…Google · Chrome | High8.8 |
| CVE-2026-126908 | Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted…Google · Chrome | High8.8 |
| CVE-2026-126855 | Missing authorization in ImageCapture in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to bypass web…Google · Chrome | Medium6.8 |
| CVE-2026-126893 | Out of bounds write in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…Google · Chrome | High8.8 |
| CVE-2026-126915 | Use of uninitialized variable in Skia in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process…Google · Chrome | High7.5 |
| CVE-2026-126906 | Race condition in Extensions in Google Chrome on on Mac prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to obtain…Google · Chrome | Medium5.9 |
| CVE-2026-126882 | Information leak in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to leak cross-origin data…Google · Chrome | Low3.1 |
| CVE-2026-126848 | Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to read memory…Google · Chrome | Low3.1 |
| CVE-2026-126840 | Out of bounds write in Network in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…Google · Chrome | High8.8 |
| CVE-2026-126883 | Use after free in Core in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to execute…Google · Chrome | High7.5 |
| CVE-2026-126857 | Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium…Google · Chrome | Medium4.3 |
| CVE-2026-126897 | Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…Google · Chrome | High8.8 |
| CVE-2026-126892 | Use after free in MediaStream in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…Google · Chrome | High8.8 |
| CVE-2026-126854 | Incorrect authorization in Layout in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.…Google · Chrome | Medium4.3 |
| CVE-2026-126843 | Type confusion in Turbolev in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…Google · Chrome | High8.8 |
| CVE-2026-126888 | Buffer overflow in Turbolev in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…Google · Chrome | High8.8 |
| CVE-2026-126877 | Use after free in Dawn in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to execute arbitrary code…Google · Chrome | High7.5 |
| CVE-2026-126872 | Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code…Google · Chrome | Critical9.6 |
| CVE-2026-126880 | Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…Google · Chrome | High8.8 |
| CVE-2026-126914 | Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium…Google · Chrome | Medium4.3 |
| CVE-2026-126922 | Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to leak cross-origin data…Google · Chrome | Low3.1 |
| CVE-2026-126873 | Use after free in Extensions in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary…Google · Chrome | High8.8 |
| CVE-2026-126905 | Incomplete cleanup in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…Google · Chrome | High8.8 |
| CVE-2026-126856 | Incomplete cleanup in Cache in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium…Google · Chrome | Medium4.3 |
| CVE-2026-126917 | Memory corruption in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…Google · Chrome | High8.8 |
| CVE-2026-126861 | Use after free in Media in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a…Google · Chrome | High8.8 |
| CVE-2026-126894 | Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to leak cross-origin data…Google · Chrome | Low3.1 |
| CVE-2026-126884 | Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page.…Google · Chrome | Medium4.7 |
| CVE-2026-126844 | Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to read memory…Google · Chrome | Low3.1 |
| CVE-2026-126866 | Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code…Google · Chrome | High8.8 |
| CVE-2026-126918 | Use after free in Layout in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…Google · Chrome | High8.8 |
| CVE-2026-126876 | Integer overflow in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…Google · Chrome | High8.8 |
| CVE-2026-126874 | Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…Google · Chrome | High8.8 |
| CVE-2026-126891 | Use after free in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium…Google · Chrome | Medium4.3 |
| CVE-2026-126858 | Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox via a…Google · Chrome | Medium4.7 |
| CVE-2026-126869 | Use after free in Frames in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…Google · Chrome | High8.8 |
| CVE-2026-126896 | Missing authorization in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium…Google · Chrome | High8.1 |
| CVE-2026-126863 | Use after free in HTML in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted…Google · Chrome | High8.8 |