Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 405,245All CVEsplus 19,158 rejected
- 593Last 24 hours4,855 in the last 7 days
- 18,853Last 30 days1,608 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per month
In the last 12 months, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| Nov 2026 | 0 | 16 | 0 | 0 | 49 | 65 | 18,386 |
| Oct 2026 | 13 | 172 | 0 | 0 | 866 | 1,051 | 18,321 |
| Sept 2026 | 110 | 644 | 64 | 0 | 1,289 | 2,107 | 17,270 |
| Aug 2026 | 212 | 740 | 0 | 0 | 691 | 1,643 | 15,163 |
| Jul 2026 | 88 | 424 | 242 | 0 | 82 | 836 | 13,520 |
| Jun 2026 | 40 | 239 | 234 | 0 | 0 | 513 | 12,684 |
| May 2026 | 43 | 403 | 580 | 1 | 0 | 1,027 | 12,171 |
| Apr 2026 | 29 | 166 | 182 | 0 | 0 | 377 | 11,144 |
| Mar 2026 | 1 | 64 | 113 | 0 | 0 | 178 | 10,767 |
| Feb 2026 | 1 | 61 | 123 | 0 | 35 | 220 | 10,589 |
| Jan 2026 | 12 | 84 | 87 | 2 | 61 | 246 | 10,369 |
| Dec 2025 | 37 | 292 | 8 | 0 | 717 | 1,054 | 10,123 |
| Nov 2025 | 2 | 42 | 1 | 0 | 56 | 101 | 9,069 |
| Title | ||
|---|---|---|
| CVE-2026-99288 | inet: reject unhashed sockets during established lookupsLinux · Linux | Not scored |
| CVE-2026-99287 | xen-netback: Zero out sring pointers on unmapLinux · Linux | Not scored |
| CVE-2026-99286 | xen-netback: Fix XenBus connection failure cleanupLinux · Linux | Not scored |
| CVE-2026-99285 | netfilter: nft_byteorder: remove multi-register supportLinux · Linux | Not scored |
| CVE-2026-99284 | net: skbuff: propagate shared-frag marker in skb_zerocopy()Linux · Linux | Not scored |
| CVE-2026-99283 | netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packetsLinux · Linux | Not scored |
| CVE-2026-99282 | net/sched: sch_teql: fix use-after-free on lower qdisc dropLinux · Linux | Not scored |
| CVE-2026-99281 | tun: Require CAP_NET_ADMIN to attach to an ownerless deviceLinux · Linux | High7.8 |
| CVE-2026-99280 | ksmbd: drain session procfs readers before dropping table referencesLinux · Linux | Not scored |
| CVE-2026-99279 | ksmbd: reclaim ended sessions on logoff and expirationLinux · Linux | Not scored |
| CVE-2026-99278 | ksmbd: limit sessions on each connectionLinux · Linux | Not scored |
| CVE-2026-99277 | ksmbd: hold a connection reference for each session channelLinux · Linux | High7.5 |
| CVE-2026-99276 | ksmbd: defer connection scavenging while session locks are busyLinux · Linux | Not scored |
| CVE-2026-99275 | smb: client: reject short SESSION_SETUP responsesLinux · Linux | Not scored |
| CVE-2026-99274 | smb: client: fix fiemap wild read on empty truncated responseLinux · Linux | Not scored |
| CVE-2026-99273 | ksmbd: reserve space for the UTF-16 terminator in stream infoLinux · Linux | Not scored |
| CVE-2026-99272 | smb: client: validate the data area in SMB2_read()Linux · Linux | Not scored |
| CVE-2026-99271 | ALSA: line6: Clear prev_fbuf on capture buffer releaseLinux · Linux | Not scored |
| CVE-2026-100082 | xen-blkback: Avoid UAF when reading I/O statisticsLinux · Linux | Not scored |
| CVE-2026-100081 | xen-netback: defer xenvif_mcast_addr_list_free()Linux · Linux | High7.8 |
| CVE-2026-100080 | xen-netback: Fix UAF when reading statistics dataLinux · Linux | Not scored |
| CVE-2026-99270 | tcp: Fix potential UAF in reqsk_timer_handler().Linux · Linux | High8.1 |
| CVE-2026-99269 | sched_ext: Wait for SCX_OPSS_DISPATCHING before moving tasks off DSQsLinux · Linux | High7.8 |
| CVE-2026-99261 | drm/amdgpu: correct reservation fence slots for userq per-vm BOs evictionLinux · Linux | Not scored |
| CVE-2026-99260 | ntfs: fix resident conversion in ntfs_new_attr_flagsLinux · Linux | Not scored |
| CVE-2026-99259 | soc/tegra: pmc: Fix uninitialised clock rateLinux · Linux | Not scored |
| CVE-2026-99258 | x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index()Linux · Linux | Not scored |
| CVE-2026-99257 | gpio: shared: gracefully handle no-device lookup of shared GPIOsLinux · Linux | Not scored |
| CVE-2026-99256 | dm cache: fix issue with background work lockingLinux · Linux | Not scored |
| CVE-2026-99255 | io_uring/io-wq: don't hide a link from cancellationsLinux · Linux | Not scored |
| CVE-2026-99254 | io_uring: don't flood a cancelling task with task_workLinux · Linux | Not scored |
| CVE-2026-99253 | io_uring/cancel: rearm local work wake up before sleepLinux · Linux | Not scored |
| CVE-2026-99251 | Drivers: hv: Avoid infinite retry loop in init_vp_index()Linux · Linux | Not scored |
| CVE-2026-99250 | printk: Postpone kthread startupLinux · Linux | Not scored |
| CVE-2026-99249 | pid_namespace: make zap_pid_ns_processes() freezableLinux · Linux | Not scored |
| CVE-2026-99248 | i2c: xiic: restore non-managed runtime PM to fix clk WARN floodLinux · Linux | Not scored |
| CVE-2026-99247 | tracing: Do not initialize tracefs work if tracing is disabledLinux · Linux | Not scored |
| CVE-2026-99246 | tipc: protect node reset trace dump with node lockLinux · Linux | High8.1 |
| CVE-2026-99245 | KEYS: Fix key_reject_and_link() race with keyring restrictionLinux · Linux | Not scored |
| CVE-2026-99244 | pid_namespace: prevent TIF_NOTIFY_SIGNAL from interrupting the reaperLinux · Linux | Not scored |
| CVE-2026-99242 | ntfs: fix race between fallocate and mmap readsLinux · Linux | Not scored |
| CVE-2026-99241 | ntfs: take invalidate_lock in ntfs_filemap_page_mkwrite()Linux · Linux | Not scored |
| CVE-2026-99240 | mm/damon/core: error damos_commit_quota_goal() for zero target_valueLinux · Linux | Not scored |
| CVE-2026-99239 | Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has connLinux · Linux | High7.8 |
| CVE-2026-99238 | tracing: Hold trace_types_lock when updating modules in persistent instancesLinux · Linux | High7.8 |
| CVE-2026-99237 | tracing: Hold trace_types_lock when resetting last boot data from readersLinux · Linux | High7.8 |
| CVE-2026-99236 | tracing: Reject incomplete event filter expressionsLinux · Linux | High7.8 |
| CVE-2026-99235 | tracing: Save the event file instead of the compatible histogramLinux · Linux | High7.8 |
| CVE-2026-99234 | tracing: Unregister field variable histograms when the command failsLinux · Linux | Not scored |
| CVE-2026-99233 | tracing/histograms: Verify event_call identity when updating synth_event refcountLinux · Linux | High7.8 |