Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 402,127All CVEsplus 19,141 rejected
- 320Last 24 hours3,306 in the last 7 days
- 16,921Last 30 days1,559 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 5 | 25 | 15 | 0 | 45 | 45 |
| Title | ||
|---|---|---|
| CVE-2026-93658 | uutils coreutils 0.0.18 before 0.10.0 Privilege Escalation via setuidPublic exploituutils · coreutils | High7.3 |
| CVE-2026-35381 | uutils coreutils cut Local Logic Error and Data Integrity Issue in Output FilteringUutils · coreutils | Low3.3 |
| CVE-2026-35380 | uutils coreutils cut Local Logic Error and Data Integrity Issue in Delimiter ParsingUutils · coreutils | Medium5.5 |
| CVE-2026-35379 | uutils coreutils tr Local Logic Error and Data Integrity Issue in Character Class HandlingPublic exploitUutils · coreutils | Low3.3 |
| CVE-2026-35378 | uutils coreutils expr Local Denial of Service via Eager Evaluation of Parenthesized SubexpressionsPublic exploitUutils · coreutils | Low3.3 |
| CVE-2026-35377 | uutils coreutils env Local Denial of Service via Improper Handling of Backslashes in Split-String ModeUutils · coreutils | Low3.3 |
| CVE-2026-35376 | uutils coreutils chcon Security Bypass and Mandatory Access Control (MAC) Inconsistency via TOCTOU Race ConditionUutils · coreutils | Medium4.5 |
| CVE-2026-35375 | uutils coreutils split Local Data Integrity Issue via Lossy Filename EncodingPublic exploitUutils · coreutils | Low3.3 |
| CVE-2026-35374 | uutils coreutils split Arbitrary File Truncation via Time-of-Check to Time-of-Use (TOCTOU) Race ConditionUutils · coreutils | Medium6.3 |
| CVE-2026-35373 | uutils coreutils ln Local Denial of Service via Improper Handling of Non-UTF-8 FilenamesPublic exploitUutils · coreutils | Low3.3 |
| CVE-2026-35372 | uutils coreutils ln Security Bypass via Improper Handling of the --no-dereference FlagUutils · coreutils | Medium5.0 |
| CVE-2026-35371 | uutils coreutils id Misleading Identity Reporting in Pretty Print ModePublic exploitUutils · coreutils | Low3.3 |
| CVE-2026-35370 | uutils coreutils id Incorrect Access-Control Decisions via Misrepresented Group MembershipPublic exploitUutils · coreutils | Medium4.4 |
| CVE-2026-35369 | uutils coreutils kill System-wide Process Termination and Denial of Service via Argument MisinterpretationUutils · coreutils | Medium5.5 |
| CVE-2026-35368 | uutils coreutils chroot Local Privilege Escalation and chroot Escape in via Name Service Switch (NSS) InjectionPublic exploitUutils · coreutils | High7.2 |
| CVE-2026-35367 | uutils coreutils nohup Information Disclosure via Insecure Default Output PermissionsPublic exploitUutils · coreutils | Low3.3 |
| CVE-2026-35366 | uutils coreutils printenv Security Inspection Bypass via UTF-8 EnforcementPublic exploitUutils · coreutils | Medium4.4 |
| CVE-2026-35365 | uutils coreutils mv Denial of Service and Data Duplication via Improper Symlink ExpansionUutils · coreutils | Medium6.6 |
| CVE-2026-35364 | uutils coreutils mv Arbitrary File Overwrite via Cross-Device TOCTOU Race ConditionPublic exploitUutils · coreutils | Medium6.3 |
| CVE-2026-35363 | uutils coreutils rm Safeguard Bypass via Improper Path NormalizationUutils · coreutils | Medium5.6 |
| CVE-2026-35362 | uutils coreutils Missing TOCTOU Protection on Non-Linux Unix Platforms in Safe Traversal ModuleUutils · coreutils | Low3.6 |
| CVE-2026-35361 | uutils coreutils mknod Security Label Inconsistency and Broken Cleanup on SELinux SystemsPublic exploitUutils · coreutils | Low3.4 |
| CVE-2026-35360 | uutils coreutils touch Arbitrary File Truncation via TOCTOU Race ConditionPublic exploitUutils · coreutils | Medium6.3 |
| CVE-2026-35359 | uutils coreutils cp Information Disclosure via Time-of-Check to Time-of-Use Symlink SwapPublic exploitUutils · coreutils | Medium4.7 |
| CVE-2026-35358 | uutils coreutils cp Semantic Loss and Potential Denial of Service with -R via Device Node Stream ReadingPublic exploitUutils · coreutils | Medium4.4 |
| CVE-2026-35357 | uutils coreutils cp Information Disclosure via Permission Handling RacePublic exploitUutils · coreutils | Medium4.7 |
| CVE-2026-35356 | uutils coreutils install Arbitrary File Overwrite with -D via Path Component Symlink RaceUutils · coreutils | Medium6.3 |
| CVE-2026-35355 | uutils coreutils install Arbitrary File Overwrite via Symlink TOCTOU RacePublic exploitUutils · coreutils | Medium6.3 |
| CVE-2026-35354 | uutils coreutils mv Security Xattr TOCTOU Race in Cross-DevicePublic exploitUutils · coreutils | Medium4.7 |
| CVE-2026-35353 | uutils coreutils mkdir Permission Exposure Race Condition with -mUutils · coreutils | Low3.3 |
| CVE-2026-35352 | uutils coreutils mkfifo Privilege Escalation via TOCTOU Race ConditionPublic exploitUutils · coreutils | High7.0 |
| CVE-2026-35351 | uutils coreutils mv Silent Ownership Loss in Cross-Device OperationsPublic exploitUutils · coreutils | Medium4.2 |
| CVE-2026-35350 | uutils coreutils cp Unexpected Privileged Executable Creation with -pPublic exploitUutils · coreutils | Medium6.6 |
| CVE-2026-35349 | uutils coreutils Path-Based Safety Bypass with --preserve-rootUutils · coreutils | Medium6.7 |
| CVE-2026-35348 | uutils coreutils sort Local Denial of Service via Forced UTF-8 ParsingPublic exploitUutils · coreutils | Medium5.5 |
| CVE-2026-35347 | uutils coreutils comm Silent Data Loss or Denial of Service via Improper Input ValidationPublic exploitUutils · coreutils | Medium4.4 |
| CVE-2026-35346 | uutils coreutils comm Silent Data Corruption via Lossy UTF-8 NormalizationPublic exploitUutils · coreutils | Low3.3 |
| CVE-2026-35345 | uutils coreutils tail Privileged Information Disclosure via Symlink Replacement RacePublic exploitUutils · coreutils | Medium5.3 |
| CVE-2026-35344 | uutils coreutils dd Silent Data Corruption via Unconditional Truncation Error SuppressionUutils · coreutils | Low3.3 |
| CVE-2026-35343 | uutils coreutils cut Inconsistent Output Suppression with Newline DelimitersUutils · coreutils | Low3.3 |
| CVE-2026-35342 | uutils coreutils mktemp Insecure Temporary File Placement via Empty TMPDIRUutils · coreutils | Low3.3 |
| CVE-2026-35341 | uutils coreutils mkfifo Unauthorized Permission Change on Existing FilesUutils · coreutils | High7.1 |
| CVE-2026-35340 | uutils coreutils chown and chgrp False Success Exit Code in Recursive ModeUutils · coreutils | Medium5.5 |
| CVE-2026-35339 | uutils coreutils chmod False Success Exit Code in Recursive ModeUutils · coreutils | Medium5.5 |
| CVE-2026-35338 | uutils coreutils chmod Path Traversal Bypass of --preserve-rootUutils · coreutils | High7.3 |