Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 404,740All CVEsplus 19,157 rejected
- 2,030Last 24 hours4,654 in the last 7 days
- 18,872Last 30 days1,622 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 13 | 94 | 79 | 2 | 135 | 323 | 580 |
| 2025 | 6 | 39 | 22 | 0 | 0 | 67 | 257 |
| 2024 | 17 | 84 | 60 | 1 | 0 | 162 | 190 |
| 2023 | 5 | 10 | 13 | 0 | 0 | 28 | 28 |
| Title | ||
|---|---|---|
| CVE-2026-95405 | In acquireMemory of bt_bqr_offload.cc, there is a possible way to trigger an out of bounds write via a buffer size underflow due to an incorrect bounds check.…Google · Android | Not scored |
| CVE-2026-95404 | In multiple locations, there is a possible way to modify coprocessor instruction and data memory from non-secure software due to an insecure default value.…Google · Android | Medium6.7 |
| CVE-2026-95403 | In multiple locations, there is a possible way to trigger an out of bounds write in the shared memory tracking bitmap due to a missing bounds check. This could…Google · Android | Not scored |
| CVE-2026-95402 | In slice_header of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege with…Google · Android | Not scored |
| CVE-2026-95401 | In knee_function_info of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege…Google · Android | Not scored |
| CVE-2026-95400 | In StNfc_hal_write of hal_st21nfc.cc, there is a possible way to trigger an out of bounds write into global memory due to an incorrect bounds check. This could…Google · Android | Not scored |
| CVE-2026-95399 | In multiple functions of face_status.h, there is a possible way to modify verified biometric enrollment data in shared memory due to a race condition. This…Google · Android | Not scored |
| CVE-2026-95397 | In sub_layer_hrd_parameters of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of…Google · Android | Not scored |
| CVE-2026-59637 | In userdata_report of hwcodec_firmware, there is a possible Logic error due to a logic error in the code. This could lead to local information disclosure with…Google · Android | Not scored |
| CVE-2026-59636 | In has_booted_successfully of sys_state_setup_otp_ta.c, there is a possible way to trigger a permanent denial of service via premature anti-rollback fuse…Google · Android | Not scored |
| CVE-2026-59635 | In cpb_cnt of avc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege with…Google · Android | Not scored |
| CVE-2026-59632 | In RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger memory exhaustion via an undrained message queue due to a type…Google · Android | High7.5 |
| CVE-2026-59631 | In s_inter_rps_pred of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege…Google · Android | Not scored |
| CVE-2026-59630 | In check_constraint_monotonicity of lib.rs, there is a possible way to downgrade stored security policies and bypass rollback protection due to a logic error.…Google · Android | Not scored |
| CVE-2026-59628 | In s_copy_host_apb_param of multiple files, there is a possible way to trigger an out of bounds read in the video decoder command queue due to a logic error.…Google · Android | Not scored |
| CVE-2026-59626 | In SendInfo of UssiController.cpp, there is a possible way to corrupt memory via a dangling connection listener pointer due to a use after free. This could…Google · Android | Not scored |
| CVE-2026-59625 | In GetTwiddledMiptreeSparsePageMap of texmgmt.c, there is a possible way to trigger an out of bounds write due to a logic error. This could lead to remote code…Google · Android | Not scored |
| CVE-2026-59624 | In multiple locations, there is a possible way to trigger an out of bounds read via direct memory access in video decoder firmware due to a logic error. This…Google · Android | Not scored |
| CVE-2026-59623 | In CompareTelUris of SipAddress.cpp, there is a possible way to trigger an unhandled out of range exception and process crash due to an incorrect bounds check.…Google · Android | High7.5 |
| CVE-2026-59619 | In getCodecQp of GC2AV1Enc.cpp, there is a possible way to trigger an out of bounds read during quantization table lookup due to a missing bounds check. This…Google · Android | Not scored |
| CVE-2026-59618 | In smfc_v4l2_s_selection of smfc-v4l2-ioctls.c, there is a possible way to trigger an out of bounds read from adjacent shared memory buffers due to an integer…Google · Android | Not scored |
| CVE-2026-59616 | In prev_run_vcore of hwcodec_firmware, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege…Google · Android | Not scored |
| CVE-2026-59614 | In multiple functions of oem_svc_setup.c, there is a possible way to dump secure cache lines into non-secure memory on warm reset due to a missing permission…Google · Android | Not scored |
| CVE-2026-59613 | In multiple locations, there is a possible way to trigger an out of bounds read and temporary denial of service due to improper input validation. This could…Google · Android | High7.5 |
| CVE-2026-59612 | In buffering_period of avc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege…Google · Android | Not scored |
| CVE-2026-59611 | In multiple locations, there is a possible way to trigger a temporary denial of service via an integer overflow trap due to improper input validation. This…Google · Android | High7.5 |
| CVE-2026-59609 | In fence_manager_extract_iif of fence_manager.c, there is a possible way to corrupt kernel memory via fence identifier reuse due to a use after free. This…Google · Android | Not scored |
| CVE-2026-59608 | In tone_mapping_info of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege…Google · Android | Not scored |
| CVE-2026-59607 | In TzPipelineInputExtractor of TzPipelineInputExtractor.cpp, there is a possible Logic check bypass due to a logic error in the code. This could lead to local…Google · Android | Not scored |
| CVE-2026-59606 | In multiple functions of sswrp_cpm.dtsi, there is a possible way to modify global reset registers from non-secure software due to a permissions bypass. This…Google · Android | Not scored |
| CVE-2026-59604 | In multiple locations, there is a possible way to trigger an unbounded loop in video decoder firmware due to a logic error. This could lead to local denial of…Google · Android | Not scored |
| CVE-2026-59603 | In RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger a double free and process abort during message retry handling due to…Google · Android | High7.5 |
| CVE-2026-59601 | In CalculateSampleRate of cldma_alcedo.cc, there is a possible Heap Buffer Overflow due to a logic error in the code. This could lead to remote information…Google · Android | Not scored |
| CVE-2026-59599 | Android on supported Pixel devices before security patch level 2026-11-05 allows elevation of privilege in the hypervisor subcomponent in the kernel, aka…Google · Android | Not scored |
| CVE-2026-59598 | In platform_rio_ncp_wdt_handler of edgetpu_rio.c, there is a possible Use After Free due to a use after free. This could lead to local escalation of privilege…Google · Android | Not scored |
| CVE-2026-59597 | In bindDataService of DataServiceManager.java, there is a possible way to retain privileged tunnel management permissions across configuration updates due to a…Google · Android | Not scored |
| CVE-2026-59596 | In multiple functions of mpu.c, there is a possible way to execute code from non-secure memory in the security coprocessor due to an insecure default value.…Google · Android | Not scored |
| CVE-2026-59595 | In DecodeHeaderComponent of SipStack.cpp, there is a possible way to trigger stack exhaustion via unbounded mutual recursion due to a resource exhaustion. This…Google · Android | High7.5 |
| CVE-2026-59594 | In spm_alloc of encoder, there is a possible Heap Buffer Overflow due to a heap buffer overflow. This could lead to local escalation of privilege with…Google · Android | Not scored |
| CVE-2026-59593 | In tile_info of av1_decoder, there is a possible Heap Buffer Overflow due to a heap buffer overflow. This could lead to local escalation of privilege with…Google · Android | Not scored |
| CVE-2026-59589 | In s_av1_dec_metadata_scalability of av1_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of…Google · Android | Not scored |
| CVE-2026-59587 | In stpropnci_prop_st_build_set_custom_polling_cmd of stpropnci_prop_st.cc, there is a possible way to trigger an out of bounds write into global memory due to…Google · Android | Not scored |
| CVE-2026-59586 | In multiple locations, there is a possible way to recover cryptographic keys and forge authentication tags due to improperly used crypto. This could lead to…Google · Android | Not scored |
| CVE-2026-59585 | In SetDisplayName of RegInfoContact.cpp, there is a possible denial of service due to a missing null check. This could lead to remote denial of service with no…Google · Android | High7.5 |
| CVE-2026-59583 | In FormCredentials of SipAuHelper.cpp, there is a possible way to disclose authentication credentials in cleartext via a scheme downgrade due to improper input…Google · Android | Not scored |
| CVE-2026-59582 | In StartTimer of UcePublishManager.cpp, there is a possible way to trigger a process abort during timer calculation due to an integer overflow. This could lead…Google · Android | High7.5 |
| CVE-2026-59580 | In trusty_context_switch of services/spd/trusty/trusty.c, there is a possible Secure world register state leak due to a logic error in the code. This could…Google · Android | Not scored |
| CVE-2026-59579 | In getUserDataPayload of GC2UserData.cpp, there is a possible Logic error due to a logic error in the code. This could lead to local information disclosure…Google · Android | Not scored |
| CVE-2026-59578 | In s_check_valid_tile_param_custom_tile of av1_encoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local…Google · Android | Not scored |
| CVE-2026-59575 | In stpropnci_cb_observe_mode_suspend of stpropnci_prop_android.cc, there is a possible way to trigger an out of bounds write into global state due to a missing…Google · Android | Not scored |