Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 402,131All CVEsplus 19,141 rejected
- 324Last 24 hours3,293 in the last 7 days
- 16,925Last 30 days1,559 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 549 | 3,010 | 1,623 | 3 | 3,074 | 8,259 | 18,382 |
| 2025 | 159 | 2,060 | 2,555 | 4 | 897 | 5,675 | 10,123 |
| 2024 | 155 | 1,820 | 2,294 | 37 | 0 | 4,306 | 4,448 |
| 2023 | 1 | 38 | 7 | 1 | 0 | 47 | 142 |
| 2022 | 1 | 15 | 33 | 16 | 0 | 65 | 95 |
| 2021 | 0 | 8 | 1 | 0 | 0 | 9 | 30 |
| 2020 | 0 | 0 | 2 | 0 | 0 | 2 | 21 |
| 2019 | 1 | 3 | 6 | 0 | 0 | 10 | 19 |
| 2018 | 0 | 5 | 4 | 0 | 0 | 9 | 9 |
| Title | ||
|---|---|---|
| CVE-2026-99284 | net: skbuff: propagate shared-frag marker in skb_zerocopy()Linux · Linux | Not scored |
| CVE-2026-99283 | netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packetsLinux · Linux | Not scored |
| CVE-2026-99282 | net/sched: sch_teql: fix use-after-free on lower qdisc dropLinux · Linux | Not scored |
| CVE-2026-99281 | tun: Require CAP_NET_ADMIN to attach to an ownerless deviceLinux · Linux | Not scored |
| CVE-2026-99280 | ksmbd: drain session procfs readers before dropping table referencesLinux · Linux | Not scored |
| CVE-2026-99279 | ksmbd: reclaim ended sessions on logoff and expirationLinux · Linux | Not scored |
| CVE-2026-99278 | ksmbd: limit sessions on each connectionLinux · Linux | Not scored |
| CVE-2026-99277 | ksmbd: hold a connection reference for each session channelLinux · Linux | Not scored |
| CVE-2026-99276 | ksmbd: defer connection scavenging while session locks are busyLinux · Linux | Not scored |
| CVE-2026-99275 | smb: client: reject short SESSION_SETUP responsesLinux · Linux | Not scored |
| CVE-2026-99274 | smb: client: fix fiemap wild read on empty truncated responseLinux · Linux | Not scored |
| CVE-2026-99273 | ksmbd: reserve space for the UTF-16 terminator in stream infoLinux · Linux | Not scored |
| CVE-2026-99272 | smb: client: validate the data area in SMB2_read()Linux · Linux | Not scored |
| CVE-2026-99271 | ALSA: line6: Clear prev_fbuf on capture buffer releaseLinux · Linux | Not scored |
| CVE-2026-100082 | xen-blkback: Avoid UAF when reading I/O statisticsLinux · Linux | Not scored |
| CVE-2026-100081 | xen-netback: defer xenvif_mcast_addr_list_free()Linux · Linux | Not scored |
| CVE-2026-100080 | xen-netback: Fix UAF when reading statistics dataLinux · Linux | Not scored |
| CVE-2026-99270 | tcp: Fix potential UAF in reqsk_timer_handler().Linux · Linux | High8.1 |
| CVE-2026-99269 | sched_ext: Wait for SCX_OPSS_DISPATCHING before moving tasks off DSQsLinux · Linux | High7.8 |
| CVE-2026-99261 | drm/amdgpu: correct reservation fence slots for userq per-vm BOs evictionLinux · Linux | Not scored |
| CVE-2026-99260 | ntfs: fix resident conversion in ntfs_new_attr_flagsLinux · Linux | Not scored |
| CVE-2026-99259 | soc/tegra: pmc: Fix uninitialised clock rateLinux · Linux | Not scored |
| CVE-2026-99258 | x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index()Linux · Linux | Not scored |
| CVE-2026-99257 | gpio: shared: gracefully handle no-device lookup of shared GPIOsLinux · Linux | Not scored |
| CVE-2026-99256 | dm cache: fix issue with background work lockingLinux · Linux | Not scored |
| CVE-2026-99255 | io_uring/io-wq: don't hide a link from cancellationsLinux · Linux | Not scored |
| CVE-2026-99254 | io_uring: don't flood a cancelling task with task_workLinux · Linux | Not scored |
| CVE-2026-99253 | io_uring/cancel: rearm local work wake up before sleepLinux · Linux | Not scored |
| CVE-2026-99251 | Drivers: hv: Avoid infinite retry loop in init_vp_index()Linux · Linux | Not scored |
| CVE-2026-99250 | printk: Postpone kthread startupLinux · Linux | Not scored |
| CVE-2026-99249 | pid_namespace: make zap_pid_ns_processes() freezableLinux · Linux | Not scored |
| CVE-2026-99248 | i2c: xiic: restore non-managed runtime PM to fix clk WARN floodLinux · Linux | Not scored |
| CVE-2026-99247 | tracing: Do not initialize tracefs work if tracing is disabledLinux · Linux | Not scored |
| CVE-2026-99246 | tipc: protect node reset trace dump with node lockLinux · Linux | High8.1 |
| CVE-2026-99245 | KEYS: Fix key_reject_and_link() race with keyring restrictionLinux · Linux | Not scored |
| CVE-2026-99244 | pid_namespace: prevent TIF_NOTIFY_SIGNAL from interrupting the reaperLinux · Linux | Not scored |
| CVE-2026-99242 | ntfs: fix race between fallocate and mmap readsLinux · Linux | Not scored |
| CVE-2026-99241 | ntfs: take invalidate_lock in ntfs_filemap_page_mkwrite()Linux · Linux | Not scored |
| CVE-2026-99240 | mm/damon/core: error damos_commit_quota_goal() for zero target_valueLinux · Linux | Not scored |
| CVE-2026-99239 | Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has connLinux · Linux | High7.8 |
| CVE-2026-99238 | tracing: Hold trace_types_lock when updating modules in persistent instancesLinux · Linux | High7.8 |
| CVE-2026-99237 | tracing: Hold trace_types_lock when resetting last boot data from readersLinux · Linux | High7.8 |
| CVE-2026-99236 | tracing: Reject incomplete event filter expressionsLinux · Linux | High7.8 |
| CVE-2026-99235 | tracing: Save the event file instead of the compatible histogramLinux · Linux | High7.8 |
| CVE-2026-99234 | tracing: Unregister field variable histograms when the command failsLinux · Linux | Not scored |
| CVE-2026-99233 | tracing/histograms: Verify event_call identity when updating synth_event refcountLinux · Linux | High7.8 |
| CVE-2026-99232 | tracing/syscalls: Use copy_from_user for the faultable syscall bufferLinux · Linux | Not scored |
| CVE-2026-99231 | io_uring/waitid: own the request before clearing ->headLinux · Linux | High7.8 |
| CVE-2026-99230 | io_uring/cmd: don't leave list poison in ->hash_nodeLinux · Linux | Not scored |
| CVE-2026-99229 | io_uring/wait: don't spin on a stuck overflow listLinux · Linux | Not scored |