Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 405,382All CVEsplus 19,159 rejected
- 644Last 24 hours4,898 in the last 7 days
- 18,773Last 30 days1,596 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 12 |
| 2025 | 1 | 6 | 5 | 0 | 0 | 12 | 12 |
| Title | ||
|---|---|---|
| CVE-2025-6044 | An Improper Access Control vulnerability in the Stylus Tools component of Google ChromeOS version 16238.64.0 on the garaged stylus devices allows a physical…Google · ChromeOS | Medium6.1 |
| CVE-2025-6179 | ChromeOS Extension Disablement and Developer Mode Bypass via ExtHang3r and ExtPrint3r ExploitsGoogle · ChromeOS | Critical9.8 |
| CVE-2025-6177 | ChromeOS MiniOS Root Code Execution Bypass While Dev Mode BlockedPublic exploitGoogle · ChromeOS | High7.4 |
| CVE-2025-2509 | Out-of-Bounds Read in Virglrenderer in ChromeOS 16093.57.0 allows a malicious guest VM to achieve arbitrary address access within the crosvm sandboxed process,…Google · ChromeOS | High7.8 |
| CVE-2025-1290 | A race condition Use-After-Free vulnerability exists in the virtio_transport_space_update function within the Kernel 5.4 on ChromeOS. Concurrent allocation and…Google · ChromeOS | High8.1 |
| CVE-2025-1568 | Access Control Vulnerability in Gerrit chromiumos project configuration in Google ChromeOS 16063.87.0 allows an attacker with a registered Gerrit account to…Google · ChromeOS | High8.8 |
| CVE-2025-2073 | Out-of-Bounds Read in netfilter/ipset in Linux Kernel ChromeOS [6.1, 5.15, 5.10, 5.4, 4.19] allows a local attacker with low privileges to trigger an…Google · ChromeOS | High8.8 |
| CVE-2025-1704 | ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users with local access to unenroll devices…Google · ChromeOS | Medium6.5 |
| CVE-2025-1566 | DNS Leak in Native System VPN in Google ChromeOS Dev Channel on ChromeOS 16002.23.0 allows network observers to expose plaintext DNS queries via failure to…Public exploitGoogle · ChromeOS | High7.5 |
| CVE-2025-1122 | Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 15753.50.0 stable on Cr50 Boards allows an attacker with root access to gain persistence and…Public exploitGoogle · ChromeOS | Medium6.7 |
| CVE-2025-1292 | TPM2 Out-Of-Bounds Write Leading to Potential Operating System Verification Bypass in ChromeOSPublic exploitGoogle · ChromeOS | Medium6.7 |
| CVE-2025-1121 | Privilege escalation in Installer and Recovery image handling in Google ChromeOS version 15786.48.2 on device allows an attacker with physical access to gain…Public exploitGoogle · ChromeOS | Medium6.8 |