Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 402,245All CVEsplus 19,142 rejected
- 289Last 24 hours3,286 in the last 7 days
- 16,882Last 30 days1,538 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 1 | 0 | 1 | 0 | 2 | 40 |
| 2025 | 0 | 2 | 1 | 1 | 0 | 4 | 38 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 34 |
| 2023 | 0 | 0 | 1 | 0 | 0 | 1 | 34 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 33 |
| 2021 | 0 | 3 | 0 | 0 | 0 | 3 | 33 |
| 2020 | 1 | 4 | 6 | 0 | 0 | 11 | 30 |
| 2019 | 1 | 4 | 8 | 5 | 0 | 18 | 19 |
| 2018 | 0 | 1 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-109518 | APT RCE via hard link reuseDebian · APT | High7.7 |
| CVE-2026-3497 | Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux…Ubuntu · openssh | Low2.7 |
| CVE-2025-7044 | Privilege Escalation in MAAS via Websocket Request ManipulationUbuntu · MAAS | High7.7 |
| CVE-2025-2486 | UEFI Shell accessible in AAVMF with Secure Boot enabled on UbuntuUbuntu · edk2 | Low3.7 |
| CVE-2023-0881 | DDoS in Ubuntu package linux-bluefieldUbuntu · Ubuntu package linux-bluefield | High7.5 |
| CVE-2022-1804 | Accountsservice incorrectly drops privilegesUbuntu · Linux | Medium5.5 |
| CVE-2020-11935 | aufs: improperly managed inode reference counts in the vfsub_dentry_open() methodUbuntu · Linux kernel (aufs filesystem module) | Medium4.4 |
| CVE-2021-3939 | Free of static data in accountsserviceUbuntu · accountsservice | High7.8 |
| CVE-2021-3493 | The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files in an…ExploitedPublic exploitUbuntu · linux kernel | High8.8 |
| CVE-2021-3492 | Ubuntu linux kernel shiftfs file system double free vulnerabilityUbuntu · Linux kernel | High8.8 |
| CVE-2020-27347 | tmux stack buffer overflow in function input_csi_dispatch_sgr_colontmux · tmux | High8.8 |
| CVE-2020-15708 | Libvirt Service Arbitrary File Write Privilege Escalation VulnerabilityUbuntu · libvirt | Critical9.3 |
| CVE-2020-15707 | GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow.Ubuntu · grub2 in Ubuntu | Medium5.7 |
| CVE-2020-15706 | GRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing.Ubuntu · grub2 in Ubuntu | Medium6.4 |
| CVE-2020-15705 | GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shimUbuntu · grub2 in Ubuntu | Medium6.4 |
| CVE-2014-1423 | Online Accounts Signon daemon gives out all oauth tokens to any appUbuntu · signon | Medium5.9 |
| CVE-2019-15794 | Reference counting error in overlayfs/shiftfs error path when used in conjuction with aufsUbuntu · Linux kernel | High7.1 |
| CVE-2019-15793 | Mishandling of file-system uid/gid with namespaces in shiftfsUbuntu · Shiftfs in the Linux kernel | Medium6.5 |
| CVE-2019-15792 | Type confusion in shiftfsUbuntu · Shiftfs in the Linux kernel | High7.1 |
| CVE-2019-15791 | Reference count underflow in shiftfsUbuntu · Shiftfs in the Linux kernel | High7.1 |
| CVE-2020-8832 | Ubuntu 18.04 Linux kernel i915 incomplete fix for CVE-2019-14615Ubuntu · 18.04 LTS (bionic) Linux kernel | Medium5.5 |
| CVE-2012-2092 | A Security Bypass vulnerability exists in Ubuntu Cobbler before 2,2,2 in the cobbler-ubuntu-import script due to an error when verifying the GPG signature.Ubuntu · Cobbler | Medium5.9 |
| CVE-2019-7307 | Apport contains a TOCTTOU vulnerability when reading the users ~/.apport-ignore.xmlUbuntu · apport | Medium6.5 |
| CVE-2019-11476 | Integer overflow in whoopsie results in out-of-bounds heap writeUbuntu · Whoopsie | Medium6.5 |
| CVE-2016-1587 | The Snapweb interface before version 0.21.2 was exposing controls to install or remove snap packages without controlling the identity of the user, nor the…Ubuntu · snapweb | High7.1 |
| CVE-2016-1586 | A malicious webview could install long-lived unload handlers that re-use an incognito BrowserContext that is queued for destruction in versions of Oxide before…Ubuntu · Oxide | Low1.8 |
| CVE-2016-1584 | Unity8 converged application lifecycle allows background applications to use on-screen keyboard when not top-mostUbuntu · Unity8 | Low1.6 |
| CVE-2016-1579 | UDM doesn't check for confinement before running post-processing commandsUbuntu · Ubuntu Download Manager | Medium6.7 |
| CVE-2016-1573 | Using a specially crafted fallback art property, scopes can execute arbitrary QML code in context of unity8-dashUbuntu · Unity8 | Medium4.8 |
| CVE-2015-1343 | unity-scope-gdrive search feature logs search terms to syslogUbuntu · unity-scope-gdrive | Low2.0 |
| CVE-2015-1341 | Apport privilege escalation through Python module importsUbuntu · Apport | High7.4 |
| CVE-2015-1340 | chmod race in doUidshiftIntoContainerUbuntu · LXD | High7.0 |
| CVE-2015-1327 | Content-hub DBUS API doesn't prevent confined apps from passing paths to files without accessUbuntu · Content Hub | Low3.9 |
| CVE-2015-1326 | python-dbusmock arbitrary code execution or file overwrite when templates are loaded from /tmpUbuntu · python-dbusmock | Medium5.7 |
| CVE-2015-1320 | Probe-and-enlist for SeaMicro chassis writes password to the logUbuntu · MAAS | Medium5.5 |
| CVE-2015-1316 | Juju Joyent provider uploads user's private ssh key by defaultUbuntu · Juju | Medium6.4 |
| CVE-2014-1428 | uuid.uuid1() is not suitable as an unguessable identifier/tokenUbuntu · MAAS | Low2.0 |
| CVE-2014-1427 | MAAS API vulnerable to CSRF attackUbuntu · MAAS | Critical9.6 |
| CVE-2014-1426 | get_file_by_name does not check ownerUbuntu · maas | High8.6 |
| CVE-2018-6557 | Insecure temporary file use in base-filesUbuntu · base-files | High7.0 |