Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 406,610All CVEsplus 19,172 rejected
- 69Last 24 hours4,659 in the last 7 days
- 16,272Last 30 days1,435 of them critical
- 1,781Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 3 | 0 | 0 | 0 | 3 | 90 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 87 |
| 2024 | 0 | 12 | 4 | 0 | 0 | 16 | 87 |
| 2023 | 2 | 17 | 46 | 3 | 0 | 68 | 71 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| 2019 | 0 | 0 | 0 | 1 | 0 | 1 | 3 |
| 2018 | 0 | 1 | 0 | 0 | 0 | 1 | 2 |
| 2017 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2016 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2015 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2014 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2013 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2012 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2011 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2010 | 0 | 1 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-94422 | xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escapexdg-dbus-proxy | High8.7 |
| CVE-2026-19816 | PackageKit: dnf5 backend ignores SIMULATE on RepoRemovePackageKit | High7.1 |
| CVE-2026-19624 | NetworkManager-l2tp: local privilege escalation via ipsec.conf injectionNetworkManager-l2tp | High7.8 |
| CVE-2024-2746 | Incomplete fix for CVE-2024-1929Fedora · dnf5daemon-server | High8.8 |
| CVE-2024-1929 | Local Root Exploit via Configuration DictionaryPublic exploitFedora · dnf5daemon-server | High7.5 |
| CVE-2024-1930 | No Limit on Number of Open Sessions / Bad Session Close BehaviourFedora · dnf5daemon-server | Medium6.5 |
| CVE-2023-4235 | Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_deliver_report() functionofono | High8.1 |
| CVE-2023-4234 | Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_submit_report() functionofono | High8.1 |
| CVE-2023-4233 | Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the sms_decode_address_field() functionofono | High8.1 |
| CVE-2023-4232 | Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_status_report() functionofono | High8.1 |
| CVE-2023-3966 | Openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packetopenvswitch | High7.5 |
| CVE-2024-1312 | Kernel: race condition leads to use after free during vma lock in lock_vma_under_rcukernel | Medium5.1 |
| CVE-2021-4435 | Yarn: untrusted search pathyarn | High7.7 |
| CVE-2023-6780 | Glibc: integer overflow in __vsyslog_internal()Public exploitglibc | Medium5.3 |
| CVE-2023-6779 | Glibc: off-by-one heap-based buffer overflow in __vsyslog_internal()glibc | High8.2 |
| CVE-2023-6246 | Glibc: heap-based buffer overflow in __vsyslog_internal()Public exploitglibc | High8.4 |
| CVE-2023-6258 | Pkcs11-provider: side-channel proofing pkcs#1 1.5 pathspkcs11-provider | High8.1 |
| CVE-2023-6200 | Kernel: icmpv6 router advertisement packets, aka linux tcp/ip remote code execution vulnerabilitykernel | High7.5 |
| CVE-2023-6395 | Mock: privilege escalation for users that can access mock configurationmock | Medium6.7 |
| CVE-2023-7090 | Sudo: improper handling of ipa_hostname leads to privilege mismanagementsudo | Medium6.6 |
| CVE-2023-4255 | W3m: out-of-bounds write in function checktype() in etc.c (incomplete fix for cve-2022-38223)w3m | Medium5.5 |
| CVE-2023-4256 | Tcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.ctcpreplay | Medium5.5 |
| CVE-2023-3430 | Openimageio: heap-buffer-overflow in file src/gif.imageio/gifinput.cppOpenImageIO | High7.5 |
| CVE-2023-6560 | Kernel: io_uring out of boundary memory access in __io_uaddr_map()kernel | Medium5.5 |
| CVE-2023-5972 | Kernel: the nfta_inner_num and nfta_expr_name netlink attributes accessed without checking its presence in nft_inner.ckernel | High7.0 |
| CVE-2023-6238 | Kernel: nvme: memory corruption via unprivileged user passthroughkernel | Medium6.7 |
| CVE-2023-6039 | Kernel: use-after-free in drivers/net/usb/lan78xx.c in lan78xx_disconnectKernel | Medium5.5 |
| CVE-2023-4154 | Samba: ad dc password exposure to privileged users and rodcssamba | High7.5 |
| CVE-2023-1194 | Use-after-free in parse_lease_state()kernel | High7.1 |
| CVE-2022-4900 | Potential buffer overflow in php_cli_server_startup_workersphp | Medium6.2 |
| CVE-2023-38473 | Reachable assertion in avahi_alternative_host_nameavahi · avahi | Medium6.2 |
| CVE-2023-38472 | Reachable assertion in avahi_rdata_parseavahi · avahi | Medium6.2 |
| CVE-2023-38471 | Reachable assertion in dbus_set_host_nameavahi · avahi | Medium6.2 |
| CVE-2023-38470 | Reachable assertion in avahi_escape_labelavahi · avahi | Medium6.2 |
| CVE-2023-38469 | Reachable assertion in avahi_dns_packet_append_recordavahi · avahi | Medium6.2 |
| CVE-2023-3164 | Heap-buffer-overflow in extractimagesection()Public exploitlibtiff | Medium5.5 |
| CVE-2023-1193 | Use-after-free in setup_async_work()Kernel | Medium6.5 |
| CVE-2023-1192 | Use-after-free in smb2_is_status_io_timeout()kernel | Medium6.5 |
| CVE-2023-5349 | Draw while calling getdrawinfo()Public exploitrmagick | Medium5.3 |
| CVE-2023-42752 | Kernel: integer overflow in igmpv3_newpack leading to exploitable memory accessKernel | Medium5.5 |
| CVE-2023-5366 | Openvswitch don't match packets on nd_target fieldopenvswitch | High7.1 |
| CVE-2022-4132 | Memory leak on tls connectionsjss | Medium5.9 |
| CVE-2023-3153 | Service monitor mac flow is not rate limitedovn | Medium5.3 |
| CVE-2023-4156 | Heap out of bound read in builtin.cPublic exploitgawk | Medium4.4 |
| CVE-2023-5158 | Possible dos from guest to host invringh_kiov_advance in vhost driver at drivers/vhost/vringh.ckernel | Medium6.5 |
| CVE-2023-25584 | Out of bounds read in parse_module function in bfd/vms-alpha.cbinutils | Medium6.3 |
| CVE-2023-25585 | Field `file_table` of `struct module *module` is uninitializedPublic exploitbinutils | Medium4.7 |
| CVE-2023-25586 | Local variable `ch_type` in function `bfd_init_section_decompress_status` can be uninitializedPublic exploitbinutils | Medium4.7 |
| CVE-2023-25588 | Field `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab`Public exploitbinutils | Medium4.7 |
| CVE-2023-32611 | G_variant_byteswap() can take a long time with some non-normal inputsglib2 | Medium5.5 |