Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 10 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 402,495All CVEsplus 19,144 rejected
- 374Last 24 hours3,375 in the last 7 days
- 17,077Last 30 days1,544 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 13 | 133 | 86 | 9 | 1 | 242 | 322 |
| 2025 | 0 | 0 | 1 | 0 | 0 | 1 | 80 |
| 2024 | 6 | 5 | 0 | 1 | 0 | 12 | 79 |
| 2023 | 0 | 2 | 15 | 0 | 0 | 17 | 67 |
| 2022 | 1 | 1 | 7 | 2 | 0 | 11 | 50 |
| 2021 | 0 | 0 | 2 | 0 | 0 | 2 | 39 |
| 2020 | 0 | 1 | 8 | 22 | 0 | 31 | 37 |
| 2019 | 0 | 0 | 0 | 0 | 0 | 0 | 6 |
| 2018 | 0 | 2 | 4 | 0 | 0 | 6 | 6 |
| Title | ||
|---|---|---|
| CVE-2026-121964 | FreeRDP before 3.32.2 Heap Buffer Overflow via rpc_client_recv_fragmentPublic exploitFreeRDP · FreeRDP | High8.7 |
| CVE-2026-121963 | FreeRDP before 3.32.2 Use-After-Free via Dynamic rdpsnd Channel ClosePublic exploitFreeRDP · FreeRDP | High8.2 |
| CVE-2026-121962 | FreeRDP before 3.32.2 Heap Buffer Overflow via Early User Authorization ReadPublic exploitFreeRDP · FreeRDP | High7.2 |
| CVE-2026-121961 | FreeRDP before 3.32.2 Use-After-Free via DRDYNVC Tracker RacePublic exploitFreeRDP · FreeRDP | High8.2 |
| CVE-2026-121960 | FreeRDP before 3.32.2 Unauthenticated Denial of Service via CredSSP TSRequestPublic exploitFreeRDP · FreeRDP | High8.7 |
| CVE-2026-121959 | FreeRDP before 3.32.2 Infinite Loop via Truncated WebSocket FramePublic exploitFreeRDP · FreeRDP | High7.1 |
| CVE-2026-121958 | FreeRDP through 3.32.1 Heap Out-of-Bounds Write via RDPGFX HashTable_GetKeysPublic exploitFreeRDP · FreeRDP | High8.7 |
| CVE-2026-121957 | FreeRDP before 3.32.2 Use-After-Free via RDPGFX ResetGraphics RacePublic exploitFreeRDP · FreeRDP | High8.7 |
| CVE-2026-121956 | FreeRDP before 3.32.2 Double Free in WinPR Kerberos retrieveSomeTgtPublic exploitFreeRDP · FreeRDP | High8.7 |
| CVE-2026-121955 | FreeRDP before 3.32.2 Use-After-Free in Smartcard Emulation ReleaseContextPublic exploitFreeRDP · FreeRDP | High8.7 |
| CVE-2026-121954 | FreeRDP before 3.32.2 Heap Out-of-Bounds Write in Planar CodecPublic exploitFreeRDP · FreeRDP | High7.1 |
| CVE-2026-121953 | FreeRDP before 3.32.2 Use-After-Free via rdpgfx Dynamic Virtual Channel ClosePublic exploitFreeRDP · FreeRDP | Critical9.3 |
| CVE-2026-121952 | FreeRDP before 3.32.2 Proxy Out-of-Bounds Write via Bitmap Cache v2 CapabilityPublic exploitFreeRDP · FreeRDP | Critical9.3 |
| CVE-2026-121951 | FreeRDP 3.0.0 before 3.32.2 Denial of Service via Slow-Path Input EventPublic exploitFreeRDP · FreeRDP | High8.7 |
| CVE-2026-121950 | FreeRDP before 3.32.2 Heap Overflow via RDPGFX CREATE_SURFACE Integer WrapPublic exploitFreeRDP · FreeRDP | High7.1 |
| CVE-2026-121412 | FreeRDP 3.0.0 before 3.32.2 Proxy Memory Exhaustion via DVC ReassemblyFreeRDP · FreeRDP | High7.1 |
| CVE-2026-121411 | FreeRDP before 3.32.2 X11 Client Abort via RDPGFX Scaled Output GeometryPublic exploitFreeRDP · FreeRDP | Low2.3 |
| CVE-2026-121410 | FreeRDP before 3.32.2 Denial of Service via RDPGFX ALPHA WIRETOSURFACE_2Public exploitFreeRDP · FreeRDP | Medium5.3 |
| CVE-2026-121409 | FreeRDP before 3.32.2 Denial of Service via Oversized X.224 Routing TokenPublic exploitFreeRDP · FreeRDP | High8.2 |
| CVE-2026-121408 | FreeRDP before 3.32.2 Use-After-Free via USB Redirection Control ChannelFreeRDP · FreeRDP | Medium6.0 |
| CVE-2026-121407 | FreeRDP before 3.32.2 Shadow Server Denial of Service via remdesk ChannelPublic exploitFreeRDP · FreeRDP | High7.1 |
| CVE-2026-121406 | FreeRDP before 3.32.2 Client Denial of Service via Zero-Output ZGFX PayloadPublic exploitFreeRDP · FreeRDP | Medium5.3 |
| CVE-2026-121405 | FreeRDP before 3.32.2 Memory Exhaustion via Serial RDPDR Device ControlPublic exploitFreeRDP · FreeRDP | Medium5.3 |
| CVE-2026-121404 | FreeRDP before 3.32.2 Shadow Server CPU Exhaustion via Zero-Length DVC DATAFreeRDP · FreeRDP | High7.1 |
| CVE-2026-121403 | FreeRDP before 3.32.2 Denial of Service via Malformed Drive IRPPublic exploitFreeRDP · FreeRDP | Medium5.3 |
| CVE-2026-121402 | FreeRDP before 3.32.2 X11 Client Crash via Zero-Width RDPGFX ResetGraphicsPublic exploitFreeRDP · FreeRDP | High7.1 |
| CVE-2026-121401 | FreeRDP before 3.32.2 Denial of Service via RD Gateway extended-auth packetPublic exploitFreeRDP · FreeRDP | Medium5.3 |
| CVE-2026-121400 | FreeRDP before 3.32.2 CPU Exhaustion via RDG Control PacketFreeRDP · FreeRDP | High7.1 |
| CVE-2026-121399 | FreeRDP before 3.32.2 Memory Exhaustion via RD Gateway Packet LengthPublic exploitFreeRDP · FreeRDP | Medium5.3 |
| CVE-2026-121398 | FreeRDP before 3.32.2 Use-After-Free via dyn-channel-dump ModulePublic exploitFreeRDP · FreeRDP | High8.2 |
| CVE-2026-121397 | FreeRDP before 3.32.2 Heap Over-Read via WinPR save_png_to_buffer()Public exploitFreeRDP · FreeRDP | Medium5.3 |
| CVE-2026-121396 | FreeRDP 3.0.0 before 3.32.2 denial of service via RTS padding assertionFreeRDP · FreeRDP | Medium5.3 |
| CVE-2026-121395 | FreeRDP 3.17.0 before 3.32.2 Denial of Service via RemoteFX DecoderPublic exploitFreeRDP · FreeRDP | High7.1 |
| CVE-2026-121394 | FreeRDP before 3.32.2 Denial of Service via RemoteFX RLGR decoderPublic exploitFreeRDP · FreeRDP | High7.1 |
| CVE-2026-121393 | FreeRDP 3.0.0 before 3.32.2 Denial of Service via RemoteFX Region AssertionPublic exploitFreeRDP · FreeRDP | High7.1 |
| CVE-2026-121392 | FreeRDP before 3.32.2 Certificate Identity Validation Bypass via tls_verify_certificateFreeRDP · FreeRDP | Critical9.1 |
| CVE-2026-121391 | FreeRDP before 3.32.2 File Descriptor Exhaustion via Parallel CREATEPublic exploitFreeRDP · FreeRDP | Medium5.3 |
| CVE-2026-121390 | FreeRDP before 3.32.2 Null Pointer Crash via ARM Gateway ResponsePublic exploitFreeRDP · FreeRDP | Medium5.3 |
| CVE-2026-121389 | FreeRDP 3.27.0 before 3.32.2 Client DoS via RDPDR Device Announcement LoggingPublic exploitFreeRDP · FreeRDP | Low2.3 |
| CVE-2026-121388 | FreeRDP 3.0.0 before 3.32.2 Uncapped Memory Allocation via DRDYNVC DATA_FIRSTFreeRDP · FreeRDP | High7.1 |
| CVE-2026-121387 | FreeRDP 2.0.0 before 3.32.2 Out-of-Bounds Read via GSM610/WAV49 DecoderPublic exploitFreeRDP · FreeRDP | Medium5.3 |
| CVE-2026-121386 | FreeRDP before 3.32.2 Denial of Service via WinPR PNG/JPEG Image ReadersPublic exploitFreeRDP · FreeRDP | High8.7 |
| CVE-2026-114047 | FreeRDP 2.0.0 before 3.32.0 Proxy Improper TLS Certificate ValidationFreeRDP · FreeRDP | High7.6 |
| CVE-2026-114046 | FreeRDP 3.0.0 before 3.32.0 null-pointer dereference via emulated smartcardPublic exploitFreeRDP · FreeRDP | High7.1 |
| CVE-2026-114045 | FreeRDP before 3.32.1 Heap Buffer Overflow via rdpsnd_server_select_formatFreeRDP · FreeRDP | High8.7 |
| CVE-2026-114044 | FreeRDP before 3.32.1 Android Client Heap OOB Read via Graphics PipelineFreeRDP · FreeRDP | Medium6.9 |
| CVE-2026-114043 | Vulnerability in FreeRDPPublic exploitFreeRDP · FreeRDP | High7.1 |
| CVE-2026-114042 | FreeRDP 3.32.0 Use-After-Free via drdynvc Virtual Channel PDUPublic exploitFreeRDP · FreeRDP | High7.1 |
| CVE-2026-114041 | FreeRDP before 3.32.1 Heap Out-of-Bounds Read via RD Gateway Consent MessageFreeRDP · FreeRDP | Medium6.9 |
| CVE-2026-111881 | FreeRDP 3.14.1 before 3.32.0 Integer Underflow in BMP Writer via ClipboardPublic exploitFreeRDP · FreeRDP | High7.2 |