Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
  • Support the projectPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 404,671All CVEsplus 19,156 rejected
  • 2,097Last 24 hours4,694 in the last 7 days
  • 18,829Last 30 days1,613 of them critical
  • 1,773Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
202611010315
202501400512
20241110037
20230000004
20220300034
20210000001
20200000001
20190000001
20180000001
20170100011

Latest CVEs

15 CVEs, newest first

CVEs, newest first
Title
CVE-2025-10263
Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 &…Arm · C1-Ultra
Critical9.1
CVE-2026-0995
An issue has been identified in Arm C1-Pro before r1p2-50eac0, where, under certain conditions, a TLBI+DSB might fail to ensure the completion of memory…Arm · C1 Pro
Low3.6
CVE-2025-0647
In certain Arm CPUs, a CPP RCTX instruction executed on one Processing Element (PE) may inhibit TLB invalidation when a TLBI is issued to the PE, either by the…Arm · Neoverse-N2
High7.9
CVE-2025-7427
Uncontrolled Search Path Element in Arm Development Studio before 2025Arm · Development Studio
Medium5.9
CVE-2024-7881
An unprivileged context can trigger a data memory-dependent prefetch engine to fetch the contents of a privileged location and consume those contents as an…Arm · Neoverse V2
Medium5.1
CVE-2024-10929
Spectre-BSEArm · Cortex-A72
Medium5.1
CVE-2024-11864
SCP-Firmware VulnerabilityArm · SCP-Firmware
High7.5
CVE-2024-11863
SCP-Firmware VulnerabilityArm · SCP-Firmware
Medium5.3
CVE-2024-5660
Use of Hardware Page Aggregation (HPA) and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cortex-X1,…Arm · Cortex-A77
Critical9.8
CVE-2024-9413
The transport_message_handler function in SCP-Firmware release versions 2.11.0-2.15.0 does not properly handle errors, potentially allowing an Application…Arm · SCP-Firmware
High8.0
CVE-2024-0151
Insufficient argument checking in Secure state Entry functions in software using Cortex-M Security Extensions (CMSE), that has been compiled using toolchains…Arm · Arm v8-M Security Extensions Requirements on Development Tools
Medium6.5
CVE-2021-27433
ARM mbed-ualloc memory library Integer Overflow or WraparoundARM · mbed-ualloc memory library
High7.3
CVE-2021-27431
ARM CMSIS RTOS2 Integer Overflow or WraparoundARM · CMSIS RTOS2
High7.3
CVE-2021-27435
ARM mbed Integer Overflow or WraparoundPublic exploitARM · mbed
High7.3
CVE-2017-2784
An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1.3.19, 2.x before 2.1.7, and 2.4.x…ARM · mbed TLS
High8.1