Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 402,754All CVEsplus 19,156 rejected
- 571Last 24 hours3,419 in the last 7 days
- 17,049Last 30 days1,516 of them critical
- 1,772Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 33 | 30 | 0 | 1 | 64 | 76 |
| 2025 | 0 | 1 | 7 | 3 | 0 | 11 | 12 |
| 2024 | 0 | 0 | 1 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-113681 | OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3.2.0.3-beta1 Cineon Reader Heap Out-of-Bounds ReadAcademySoftwareFoundation · OpenImageIO | Medium6.8 |
| CVE-2026-65969 | OpenImageIO: TGA-to-GIF palette split signed overflow causes SIGSEGVAcademySoftwareFoundation · OpenImageIO | Medium5.5 |
| CVE-2026-67549 | OpenImageIO: TIFF 1-bit CMYK bit conversion heap out-of-bounds writePublic exploitAcademySoftwareFoundation · OpenImageIO | High7.6 |
| CVE-2026-63638 | OpenImageIO: Cineon invalid bit depth heap out-of-bounds writePublic exploitAcademySoftwareFoundation · OpenImageIO | High8.3 |
| CVE-2026-63419 | OpenImageIO: IFF ZBUFFER tile read writes past caller tile bufferPublic exploitAcademySoftwareFoundation · OpenImageIO | High7.8 |
| CVE-2026-65970 | OpenImageIO: TIFF multithreaded scanline read use-after-scope in `TIFFInput::read_native_scanlines`Public exploitAcademySoftwareFoundation · OpenImageIO | Medium5.3 |
| CVE-2026-63635 | OpenImageIO: PSD RawColor invalid color mode causes global out-of-bounds read and allocation DoSPublic exploitAcademySoftwareFoundation · OpenImageIO | Medium5.5 |
| CVE-2026-63422 | OpenImageIO OpenEXR plugin partial edge tile heap out-of-bounds writeAcademySoftwareFoundation · OpenImageIO | High7.8 |
| CVE-2026-63420 | OpenImageIO: PSD RawColor indexed image out-of-bounds read in `interleave_row`Public exploitAcademySoftwareFoundation · OpenImageIO | Medium5.5 |
| CVE-2026-59181 | OpenImageIO: Stack buffer overflow in OpenImageIO Cineon reader via unchecked numberOfElementsPublic exploitAcademySoftwareFoundation · OpenImageIO | Medium6.1 |
| CVE-2026-59156 | OpenImageIO: Unbounded recursion in FITS header parser leads to stack overflowPublic exploitAcademySoftwareFoundation · OpenImageIO | Medium6.5 |
| CVE-2026-59956 | OpenImageIO: Heap-buffer-overread in IffInput::readimg() when ZBUFFER flag is setPublic exploitAcademySoftwareFoundation · OpenImageIO | Medium6.1 |
| CVE-2026-50291 | OpenImageIO: Segmentation Fault in BmpInput::read_native_scanline (bmpinput.cpp:399)Public exploitAcademySoftwareFoundation · OpenImageIO | Medium5.5 |
| CVE-2026-59981 | OpenEXR: Heap OOB read in SampleCountChannel row when using nonzero dataWindowPublic exploitAcademySoftwareFoundation · openexr | High7.1 |
| CVE-2026-68514 | OpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collision in deep imagesPublic exploitAcademySoftwareFoundation · openexr | Medium5.5 |
| CVE-2026-68515 | OpenEXR: Heap out-of-bounds write in exrmultiview with subsampled channel unionPublic exploitAcademySoftwareFoundation · openexr | High7.1 |
| CVE-2026-68513 | OpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collisionPublic exploitAcademySoftwareFoundation · openexr | High7.1 |
| CVE-2026-65979 | OpenEXR: Out-of-bounds read in HTJ2K decoder from unvalidated chunk header length (PLEN)Public exploitAcademySoftwareFoundation · openexr | Medium6.7 |
| CVE-2026-62986 | OpenEXR: PyOpenEXR deep prefixed RGB stale lane disclosureAcademySoftwareFoundation · openexr | Medium4.3 |
| CVE-2026-61555 | OpenEXR: Empty multiView viewFromChannelName file crashAcademySoftwareFoundation · openexr | Medium5.5 |
| CVE-2026-59985 | OpenEXR: Heap out-of-bounds read in OpenEXRCore RLE decoding on ILP32Public exploitAcademySoftwareFoundation · openexr | Medium5.5 |
| CVE-2026-59984 | OpenEXR: Scratch buffer overflow decoding B44-compressed InputFile on ILP32Public exploitAcademySoftwareFoundation · openexr | Medium5.5 |
| CVE-2026-59983 | OpenEXR: Out-of-bounds read in DeepTiledInputFile sample-count table decode on ILP32Public exploitAcademySoftwareFoundation · openexr | Medium5.5 |
| CVE-2026-59982 | OpenEXR: DWAA InputFile AC buffer overflow on ILP32 platformsAcademySoftwareFoundation · openexr | High7.1 |
| CVE-2026-59189 | OpenEXR: Out-of-bounds read in DeepImageChannel::row() for non-zero dataWindow originPublic exploitAcademySoftwareFoundation · openexr | High7.1 |
| CVE-2026-59187 | OpenEXR: exrmetrics deep pixelmode heap buffer overflowPublic exploitAcademySoftwareFoundation · openexr | High7.1 |
| CVE-2026-59186 | OpenEXR: Heap out-of-bounds write in TiledRgbaInputFile via integer overflow on 32-bit (ILP32) buildsPublic exploitAcademySoftwareFoundation · openexr | High7.1 |
| CVE-2026-59184 | OpenEXR: OpenEXRUtil FlatImageChannel row nonzero dataWindow heap OOB writeAcademySoftwareFoundation · openexr | High7.1 |
| CVE-2026-59183 | OpenEXR: Signed Integer Overflow Leading to Out-of-Bounds Memory Access in Deep Tile DecodingAcademySoftwareFoundation · openexr | Medium5.5 |
| CVE-2026-55373 | OpenEXR: OpenEXRUtil SampleCountChannel endEdit() can loop forever on UINT_MAX sample countsPublic exploitAcademySoftwareFoundation · openexr | Medium6.2 |
| CVE-2026-55371 | OpenEXR: OpenEXRCore exr_attr_set_bytes() accepts NULL type_hint with positive hint_lengthAcademySoftwareFoundation · openexr | Medium6.9 |
| CVE-2026-55059 | OpenEXR: OpenEXRUtil SampleCountChannel row setter heap has an out-of-bounds write vulnerabilityPublic exploitAcademySoftwareFoundation · openexr | Medium6.1 |
| CVE-2026-54920 | OpenEXR: Integer overflow and uninitialized pointer cause invalid delete in OpenEXRUtil image resizePublic exploitAcademySoftwareFoundation · openexr | None0.0 |
| CVE-2026-53532 | OpenEXR: Unhandled assert abort in HTJ2K decoder via crafted QCD marker (DoS)Public exploitAcademySoftwareFoundation · openexr | High7.1 |
| CVE-2026-68516 | OpenEXR: HTJ2K SIZ image-offset gap stack buffer overflowPublic exploitAcademySoftwareFoundation · openexr | Medium6.5 |
| CVE-2026-42450 | OpenColorIO vulnerable to stack buffer overflow via unbounded `sscanf %s` in Spi3D (.spi3d) LUT parserPublic exploitAcademySoftwareFoundation · OpenColorIO | High8.4 |
| CVE-2026-45696 | OpenEXR HTJ2K decoder heap buffer over-read in ht_undo_impl() (DoS)Public exploitAcademySoftwareFoundation · openexr | High8.3 |
| CVE-2026-44663 | OpenEXR: Integer overflow in the HTJ2K decoder leads to heap-buffer-overflowPublic exploitAcademySoftwareFoundation · openexr | Medium6.1 |
| CVE-2026-43903 | OpenImageIO: SGI RLE decoder heap buffer overflow OIIO_DASSERT bounds checks are no-ops in release buildsPublic exploitAcademySoftwareFoundation · OpenImageIO | High8.4 |
| CVE-2026-43904 | OpenImageIO: Softimage PIC RLE decoder heap buffer overflow — longCount not clamped to image widthPublic exploitAcademySoftwareFoundation · OpenImageIO | High8.4 |
| CVE-2026-43905 | OpenImageIO: JPEG2000 (OpenJPH) signed integer overflow in buffer allocationPublic exploitAcademySoftwareFoundation · OpenImageIO | High7.1 |
| CVE-2026-43996 | OpenImageIO: Integer wraparound in bounds check of decode_pixel leads to out-of-bounds read in TGA paletted image decoderPublic exploitAcademySoftwareFoundation · OpenImageIO | Medium5.5 |
| CVE-2026-43907 | OpenImageIO: Integer overflow in QueryRGBBufferSizeInternal leads to heap out-of-bounds write in DPX decoder (kCbYCr and kABGR)Public exploitAcademySoftwareFoundation · OpenImageIO | High8.3 |
| CVE-2026-43908 | OpenImageIO: Signed integer overflow in ConvertCbYCrYToRGB leads to heap out-of-bounds write in DPX 4:2:2 decoderPublic exploitAcademySoftwareFoundation · OpenImageIO | High8.8 |
| CVE-2026-43909 | OpenImageIO: Signed integer overflow in SwapRGBABytes loop index leads to out-of-bounds read/write in DPX ABGR decoderPublic exploitAcademySoftwareFoundation · OpenImageIO | High8.8 |
| CVE-2026-43906 | OpenImageIO: HEIF Heap overflowPublic exploitAcademySoftwareFoundation · OpenImageIO | High8.5 |
| CVE-2026-42217 | OpenEXR: Shift exponent overflow in `readVariableLengthInteger()` (`ImfIDManifest.cpp`)Public exploitAcademySoftwareFoundation · openexr | Medium6.3 |
| CVE-2026-42216 | OpenEXR: Out-of-bounds read in `IDManifest::init()` during prefix expansionPublic exploitAcademySoftwareFoundation · openexr | High8.8 |
| CVE-2026-41142 | OpenEXR is Vulnerable to Integer overflow in ImageChannel::resize leads to heap OOB write via OpenEXRUtil public APIAcademySoftwareFoundation · openexr | High8.8 |
| CVE-2026-7582 | AcademySoftwareFoundation OpenImageIO DDS Image ddsinput.cpp out-of-bounds writePublic exploitAcademySoftwareFoundation · OpenImageIO | Medium4.8 |