Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 402,302All CVEsplus 19,142 rejected
  • 343Last 24 hours3,318 in the last 7 days
  • 16,936Last 30 days1,542 of them critical
  • 1,769Known exploitedin the CISA KEV catalog

CVEs published per day

In the last 30 days, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
9 Nov 202600000018,382
8 Nov 202600000018,382
7 Nov 20260000141418,382
6 Nov 202600003318,368
5 Nov 202600000018,365
4 Nov 202600000018,365
3 Nov 20260300161918,365
2 Nov 202601000152518,346
1 Nov 202600000018,321
31 Oct 202600000018,321
30 Oct 202600000018,321
29 Oct 202600000018,321
28 Oct 2026227008811718,321
27 Oct 202600000018,204
26 Oct 20260200101218,204
25 Oct 202600000018,192
24 Oct 202600000018,192
23 Oct 20263500016421718,192
22 Oct 202600000017,975
21 Oct 202602000217,975
20 Oct 202600000017,973
19 Oct 202600000017,973
18 Oct 20264310040043517,973
17 Oct 202600000017,538
16 Oct 202600000017,538
15 Oct 202620000217,538
14 Oct 20260300434617,536
13 Oct 202600000017,490
12 Oct 202601000117,490
11 Oct 202600000017,489
10 Oct 202600000017,489

Latest CVEs

893 CVEs published in the last 30 days, newest first

CVEs, newest first
Title
CVE-2026-99284
net: skbuff: propagate shared-frag marker in skb_zerocopy()Linux · Linux
Not scored
CVE-2026-99283
netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packetsLinux · Linux
Not scored
CVE-2026-99282
net/sched: sch_teql: fix use-after-free on lower qdisc dropLinux · Linux
Not scored
CVE-2026-99281
tun: Require CAP_NET_ADMIN to attach to an ownerless deviceLinux · Linux
Not scored
CVE-2026-99280
ksmbd: drain session procfs readers before dropping table referencesLinux · Linux
Not scored
CVE-2026-99279
ksmbd: reclaim ended sessions on logoff and expirationLinux · Linux
Not scored
CVE-2026-99278
ksmbd: limit sessions on each connectionLinux · Linux
Not scored
CVE-2026-99277
ksmbd: hold a connection reference for each session channelLinux · Linux
Not scored
CVE-2026-99276
ksmbd: defer connection scavenging while session locks are busyLinux · Linux
Not scored
CVE-2026-99275
smb: client: reject short SESSION_SETUP responsesLinux · Linux
Not scored
CVE-2026-99274
smb: client: fix fiemap wild read on empty truncated responseLinux · Linux
Not scored
CVE-2026-99273
ksmbd: reserve space for the UTF-16 terminator in stream infoLinux · Linux
Not scored
CVE-2026-99272
smb: client: validate the data area in SMB2_read()Linux · Linux
Not scored
CVE-2026-99271
ALSA: line6: Clear prev_fbuf on capture buffer releaseLinux · Linux
Not scored
CVE-2026-100082
xen-blkback: Avoid UAF when reading I/O statisticsLinux · Linux
Not scored
CVE-2026-100081
xen-netback: defer xenvif_mcast_addr_list_free()Linux · Linux
Not scored
CVE-2026-100080
xen-netback: Fix UAF when reading statistics dataLinux · Linux
Not scored
CVE-2026-99270
tcp: Fix potential UAF in reqsk_timer_handler().Linux · Linux
High8.1
CVE-2026-99269
sched_ext: Wait for SCX_OPSS_DISPATCHING before moving tasks off DSQsLinux · Linux
High7.8
CVE-2026-99261
drm/amdgpu: correct reservation fence slots for userq per-vm BOs evictionLinux · Linux
Not scored
CVE-2026-99260
ntfs: fix resident conversion in ntfs_new_attr_flagsLinux · Linux
Not scored
CVE-2026-99259
soc/tegra: pmc: Fix uninitialised clock rateLinux · Linux
Not scored
CVE-2026-99258
x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index()Linux · Linux
Not scored
CVE-2026-99257
gpio: shared: gracefully handle no-device lookup of shared GPIOsLinux · Linux
Not scored
CVE-2026-99256
dm cache: fix issue with background work lockingLinux · Linux
Not scored
CVE-2026-99255
io_uring/io-wq: don't hide a link from cancellationsLinux · Linux
Not scored
CVE-2026-99254
io_uring: don't flood a cancelling task with task_workLinux · Linux
Not scored
CVE-2026-99253
io_uring/cancel: rearm local work wake up before sleepLinux · Linux
Not scored
CVE-2026-99251
Drivers: hv: Avoid infinite retry loop in init_vp_index()Linux · Linux
Not scored
CVE-2026-99250
printk: Postpone kthread startupLinux · Linux
Not scored
CVE-2026-99249
pid_namespace: make zap_pid_ns_processes() freezableLinux · Linux
Not scored
CVE-2026-99248
i2c: xiic: restore non-managed runtime PM to fix clk WARN floodLinux · Linux
Not scored
CVE-2026-99247
tracing: Do not initialize tracefs work if tracing is disabledLinux · Linux
Not scored
CVE-2026-99246
tipc: protect node reset trace dump with node lockLinux · Linux
High8.1
CVE-2026-99245
KEYS: Fix key_reject_and_link() race with keyring restrictionLinux · Linux
Not scored
CVE-2026-99244
pid_namespace: prevent TIF_NOTIFY_SIGNAL from interrupting the reaperLinux · Linux
Not scored
CVE-2026-99242
ntfs: fix race between fallocate and mmap readsLinux · Linux
Not scored
CVE-2026-99241
ntfs: take invalidate_lock in ntfs_filemap_page_mkwrite()Linux · Linux
Not scored
CVE-2026-99240
mm/damon/core: error damos_commit_quota_goal() for zero target_valueLinux · Linux
Not scored
CVE-2026-99239
Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has connLinux · Linux
High7.8
CVE-2026-99238
tracing: Hold trace_types_lock when updating modules in persistent instancesLinux · Linux
High7.8
CVE-2026-99237
tracing: Hold trace_types_lock when resetting last boot data from readersLinux · Linux
High7.8
CVE-2026-99236
tracing: Reject incomplete event filter expressionsLinux · Linux
High7.8
CVE-2026-99235
tracing: Save the event file instead of the compatible histogramLinux · Linux
High7.8
CVE-2026-99234
tracing: Unregister field variable histograms when the command failsLinux · Linux
Not scored
CVE-2026-99233
tracing/histograms: Verify event_call identity when updating synth_event refcountLinux · Linux
High7.8
CVE-2026-99232
tracing/syscalls: Use copy_from_user for the faultable syscall bufferLinux · Linux
Not scored
CVE-2026-99231
io_uring/waitid: own the request before clearing ->headLinux · Linux
High7.8
CVE-2026-99230
io_uring/cmd: don't leave list poison in ->hash_nodeLinux · Linux
Not scored
CVE-2026-99229
io_uring/wait: don't spin on a stuck overflow listLinux · Linux
Not scored