Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 405,496All CVEsplus 19,165 rejected
- 580Last 24 hours4,925 in the last 7 days
- 18,768Last 30 days1,596 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 9 | 13 | 4 | 0 | 27 | 37 |
| 2025 | 0 | 1 | 4 | 0 | 0 | 5 | 10 |
| 2024 | 0 | 4 | 1 | 0 | 0 | 5 | 5 |
| Title | ||
|---|---|---|
| CVE-2026-100290 | Double free after allocation failure in regcomp and regexecThe GNU C Library · glibc | Low3.7 |
| CVE-2026-115819 | One-byte buffer overflow in wide scanf %s and %[ conversionsThe GNU C Library · glibc | Medium4.8 |
| CVE-2026-122054 | BIG-HKSCS decoding hang on crafted inputThe GNU C Library · glibc | Medium5.9 |
| CVE-2026-84243 | gettext: Directory traversal via the LANGUAGE environment variableThe GNU C Library · glibc | High7.0 |
| CVE-2026-97399 | One-byte overread in strncasecmp on Power8The GNU C Library · glibc | Low3.7 |
| CVE-2026-95818 | AT_SECURE program buffer overflow via $ORIGIN processingThe GNU C Library · glibc | Low3.6 |
| CVE-2026-86805 | AT_SECURE programs may load attacker-controlled code via $ORIGINThe GNU C Library · glibc | Medium6.3 |
| CVE-2026-8674 | Assertion failure in the DNS stub resolver with a long search domainThe GNU C Library · glibc | Medium5.3 |
| CVE-2026-80489 | EUC_JISX0213 decoding may hang on crafted inputThe GNU C Library · glibc | Medium5.9 |
| CVE-2026-77117 | SHIFT_JISX0213 decoding may hang on crafted inputThe GNU C Library · glibc | Medium5.9 |
| CVE-2026-19542 | Stack-based out-of-bounds write in tdelete during tree rebalancingThe GNU C Library · glibc | Medium5.6 |
| CVE-2026-19499 | Buffer overflow in strfmon and strfmon_l right-justification paddingThe GNU C Library · glibc | High7.7 |
| CVE-2026-89092 | Stack overflow in nscd due to unbounded alloca useThe GNU C Library · glibc | Medium4.2 |
| CVE-2026-18374 | Passing an effectively empty string to the `,ccs=` syntax extension of the mode argument in the `fopen` function in the GNU C Library version 2.45 or earlier…The GNU C Library · glibc | Medium4.9 |
| CVE-2026-6791 | Potential stack-based buffer clash during tilde expansion in wordexpThe GNU C Library · glibc | Medium6.6 |
| CVE-2026-6368 | wordexp with WRDE_APPEND can return or use invalid memoryglibc · glibc | Low2.1 |
| CVE-2026-6238 | Buffer overread in ns_printrrf with corrupted RDATA fieldThe GNU C Library · glibc | Medium6.5 |
| CVE-2026-5435 | Potential buffer overflow in ns_sprintrrf TSIG handling pathThe GNU C Library · glibc | High7.3 |
| CVE-2026-5450 | scanf %mc off-by-one heap buffer overflowPublic exploitThe GNU C Library · glibc | Critical9.8 |
| CVE-2026-5928 | Potential buffer under-read in ungetwcPublic exploitThe GNU C Library · glibc | High7.5 |
| CVE-2026-4046 | iconv crash due to assertion failure with untrusted inputPublic exploitThe GNU C Library · glibc | High7.5 |
| CVE-2026-4438 | gethostbyaddr and gethostbyaddr_r return invalid DNS hostnamesThe GNU C Library · glibc | Medium5.4 |
| CVE-2026-4437 | gethostbyaddr and gethostbyaddr_r may incorrectly handle DNS responseThe GNU C Library · glibc | High7.5 |
| CVE-2026-3904 | Calling NSS-backed functions that support caching via nscd may call the nscd client side code and in the GNU C Library version 2.36 under high load on x86_64…The GNU C Library · glibc | Medium6.2 |
| CVE-2025-15281 | wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memoryThe GNU C Library · glibc | High7.5 |
| CVE-2026-0915 | getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovlerPublic exploitThe GNU C Library · glibc | High7.5 |
| CVE-2026-0861 | Integer overflow in memalign leads to heap corruptionThe GNU C Library · glibc | High8.4 |
| CVE-2025-8058 | The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be accomplished either…The GNU C Library · glibc | Medium5.9 |
| CVE-2025-5745 | The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vector registers v20 to v31 without saving…Public exploitThe GNU C Library · glibc | Medium5.6 |
| CVE-2025-5702 | The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving…Public exploitThe GNU C Library · glibc | Medium5.6 |
| CVE-2025-4802 | Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared…The GNU C Library · glibc | High7.8 |
| CVE-2025-0395 | When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and…Public exploitThe GNU C Library · glibc | Medium6.2 |
| CVE-2024-33602 | nscd: netgroup cache assumes NSS callback uses in-buffer stringsThe GNU C Library · glibc | High7.4 |
| CVE-2024-33601 | nscd: netgroup cache may terminate daemon on memory allocation failureThe GNU C Library · glibc | High7.3 |
| CVE-2024-33600 | nscd: Null pointer crashes after notfound responseThe GNU C Library · glibc | Medium5.9 |
| CVE-2024-33599 | nscd: Stack-based buffer overflow in netgroup cacheThe GNU C Library · glibc | High8.1 |
| CVE-2024-2961 | The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the…Public exploitThe GNU C Library · glibc | High7.3 |