Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 402,090All CVEsplus 19,141 rejected
- 289Last 24 hours3,294 in the last 7 days
- 16,913Last 30 days1,566 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 220 | 426 | 214 | 0 | 0 | 860 | 3,051 |
| 2025 | 47 | 77 | 80 | 4 | 0 | 208 | 2,191 |
| 2024 | 34 | 75 | 90 | 3 | 0 | 202 | 1,983 |
| 2023 | 20 | 71 | 101 | 2 | 0 | 194 | 1,781 |
| 2022 | 18 | 72 | 85 | 1 | 0 | 176 | 1,587 |
| 2021 | 7 | 64 | 75 | 2 | 0 | 148 | 1,411 |
| 2020 | 15 | 74 | 81 | 3 | 0 | 173 | 1,263 |
| 2019 | 41 | 49 | 53 | 1 | 0 | 144 | 1,090 |
| 2018 | 119 | 117 | 112 | 2 | 0 | 350 | 946 |
| 2017 | 1 | 0 | 1 | 0 | 0 | 2 | 596 |
| 2016 | 14 | 72 | 47 | 1 | 0 | 134 | 594 |
| 2015 | 1 | 86 | 94 | 4 | 0 | 185 | 460 |
| 2014 | 9 | 52 | 53 | 3 | 0 | 117 | 275 |
| 2013 | 6 | 93 | 58 | 1 | 0 | 158 | 158 |
| Title | ||
|---|---|---|
| CVE-2026-120572 | Incorrect boundary conditions in the Layout: Block and Inline componentMozilla · Firefox | High8.8 |
| CVE-2026-118180 | Matrix homeserver could redirect the chat session to a local file or network shareMozilla · Thunderbird | High7.5 |
| CVE-2026-118179 | Request forgery via news: linksMozilla · Thunderbird | High8.8 |
| CVE-2026-118178 | RSS feed could redirect its subscription to a local file or network shareMozilla · Thunderbird | Medium5.7 |
| CVE-2026-118177 | Calendar discovery accepted local file and remote network share locationsMozilla · Thunderbird | Critical9.1 |
| CVE-2026-118176 | Bypass of remote UNC path restriction in mailbox: URLsMozilla · Thunderbird | High8.1 |
| CVE-2026-118175 | Content of other messages could be included when replying to a crafted messageMozilla · Thunderbird | High7.5 |
| CVE-2026-118174 | Displaying a message could load an attacker-chosen URL through an OpenPGP key attachmentMozilla · Thunderbird | Medium6.5 |
| CVE-2026-118027 | Frame poisoning in the Layout componentMozilla · Firefox | Critical9.1 |
| CVE-2026-118026 | Invalid pointer in the JavaScript: GC componentMozilla · Firefox | High8.8 |
| CVE-2026-118025 | Other issue in the SVG componentMozilla · Firefox | High8.8 |
| CVE-2026-118024 | Use-after-free in the Graphics: Text componentMozilla · Firefox | High8.8 |
| CVE-2026-118023 | Sandbox escape due to use-after-free in the Graphics: WebRender componentMozilla · Firefox | High8.8 |
| CVE-2026-118022 | Sandbox escape due to use-after-free in the Disability Access APIs componentMozilla · Firefox | High8.8 |
| CVE-2026-118021 | Sandbox escape due to use-after-free in the XPCOM componentMozilla · Firefox | High8.8 |
| CVE-2026-118020 | Use-after-free in the Layout componentMozilla · Firefox | High8.8 |
| CVE-2026-118019 | Race condition, use-after-free in the DOM: File componentMozilla · Firefox | High8.8 |
| CVE-2026-118018 | Spoofing issue in the Downloads component in Firefox for AndroidMozilla · Firefox | High8.8 |
| CVE-2026-118017 | Use-after-free in the SVG componentMozilla · Firefox | High8.8 |
| CVE-2026-118016 | Use-after-free in the DOM: Core & HTML componentMozilla · Firefox | High8.8 |
| CVE-2026-118015 | Use-after-free in the DOM: Core & HTML componentMozilla · Firefox | High8.8 |
| CVE-2026-118014 | Use-after-free in the JavaScript Engine: JIT componentMozilla · Firefox | High8.8 |
| CVE-2026-118013 | Use-after-free in the Layout: Images, Video, and HTML Frames componentMozilla · Firefox | High8.8 |
| CVE-2026-118012 | Use-after-free in the DOM: Animation componentMozilla · Firefox | High8.8 |
| CVE-2026-118011 | Frame poisoning in the CSS Parsing and Computation componentMozilla · Firefox | High8.8 |
| CVE-2026-118010 | Use-after-free in the Disability Access APIs componentMozilla · Firefox | High8.8 |
| CVE-2026-118009 | Integer overflow, use-after-free in the Graphics: Text componentMozilla · Firefox | High8.8 |
| CVE-2026-118008 | Privilege escalation in the DOM: Navigation componentMozilla · Firefox | High8.8 |
| CVE-2026-118007 | Use-after-free in the JavaScript: GC componentMozilla · Firefox | High8.8 |
| CVE-2026-118006 | Privilege escalation due to use-after-free in the WebRTC: Signaling componentMozilla · Firefox | High8.8 |
| CVE-2026-118005 | Use-after-free in the WebRTC: Signaling componentMozilla · Firefox | High8.8 |
| CVE-2026-118004 | Incorrect boundary conditions in the CSS Transitions and Animations componentMozilla · Firefox | High8.1 |
| CVE-2026-118003 | Information disclosure in the Networking: DNS componentMozilla · Firefox | High8.1 |
| CVE-2026-118002 | Information disclosure due to race condition in the Networking componentMozilla · Firefox | High8.1 |
| CVE-2026-118000 | Information disclosure in the Networking: HTTP componentMozilla · Firefox | High8.1 |
| CVE-2026-117999 | Race condition in the IPC componentMozilla · Firefox | High8.8 |
| CVE-2026-117998 | Mitigation bypass in the DOM: Push Subscriptions componentMozilla · Firefox | High8.8 |
| CVE-2026-117997 | Sandbox escape due to use-after-free in the Widget componentMozilla · Firefox | Critical9.6 |
| CVE-2026-117996 | Incorrect boundary conditions in the WebRTC componentMozilla · Firefox | High8.1 |
| CVE-2026-117995 | Privilege escalation in the DOM: UI Events & Focus Handling componentMozilla · Firefox | High8.8 |
| CVE-2026-117994 | Use-after-free in the JavaScript: GC componentMozilla · Firefox | High8.8 |
| CVE-2026-117993 | Integer overflow in the Graphics: Text componentMozilla · Firefox | High8.8 |
| CVE-2026-117992 | Information disclosure in the CSS Parsing and Computation componentMozilla · Firefox | Medium6.5 |
| CVE-2026-117991 | Incorrect boundary conditions in the Layout: Text and Fonts componentMozilla · Firefox | High8.8 |
| CVE-2026-117990 | Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender componentMozilla · Firefox | Critical9.6 |
| CVE-2026-117989 | Use-after-free in the Graphics componentMozilla · Firefox | High8.8 |
| CVE-2026-117988 | Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL componentMozilla · Firefox | Critical9.6 |
| CVE-2026-117987 | Use-after-free in the Graphics componentMozilla · Firefox | High8.8 |
| CVE-2026-117986 | Use-after-free in the Graphics componentMozilla · Firefox | High8.8 |
| CVE-2026-117985 | Sandbox escape due to use-after-free in the Graphics componentMozilla · Firefox | Critical9.6 |