Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 405,380All CVEsplus 19,159 rejected
- 656Last 24 hours4,936 in the last 7 days
- 18,777Last 30 days1,596 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 4 | 7 | 0 | 0 | 12 | 12 |
| Title | ||
|---|---|---|
| CVE-2026-89087 | The cstruct package before 6.3.0 for OCaml mishandles indexes.OCaml · cstruct | High7.3 |
| CVE-2026-89086 | In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed to declare the…Public exploitOCaml · jose | Critical9.1 |
| CVE-2026-87737 | An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve scalar multiplication:…OCaml · mirage-crypto-ec | Medium5.9 |
| CVE-2026-87736 | An issue was discovered in the mirage-crypto-ec package before 2.3.0 for OCaml. There is an EC public key out-of-bounds read for compressed points.OCaml · mirage-crypto-ec | Medium4.3 |
| CVE-2026-87735 | An issue was discovered in the mirage-crypto-pk package before 2.3.0 for OCaml. There is an undocumented exception for a small message during RSA decryption or…OCaml · mirage-crypto-pk | Medium4.3 |
| CVE-2026-87734 | An issue was discovered in the utcp package before 0.0.6 for OCaml. Out-of-order segment reassembly allows remote denial of service.Public exploitOCaml · utcp | High7.5 |
| CVE-2026-87733 | An issue was discovered in the mirage-crypto-ec function before 2.2.0 for OCaml. The ECDSA functions {P256,P384,P521}.Dsa.pub_of_octets accept 0x00, the…Public exploitOCaml · mirage-crypto-ec | Medium6.2 |
| CVE-2026-87732 | An issue was discovered in the mirage-crypto package before 2.2.0 for OCaml. The AES.GCM.authenticate_decrypt_into and Chacha20.authenticate_decrypt_into…Public exploitOCaml · mirage-crypto | Medium6.2 |
| CVE-2026-57825 | In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files.OCaml · opam | Medium5.7 |
| CVE-2026-41082 | In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory.Public exploitOCaml · opam | High7.3 |
| CVE-2026-34353 | In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed.OCaml · OCaml | Medium5.9 |
| CVE-2026-28364 | In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables remote code execution through a…OCaml · OCaml | High7.9 |