Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
  • Support the projectPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 402,707All CVEsplus 19,156 rejected
  • 571Last 24 hours3,405 in the last 7 days
  • 17,077Last 30 days1,527 of them critical
  • 1,769Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
2026027201116
20250000005
20240010015
20230000004
20220000004
20210000004
20200000004
20190000004
20180000004
20170130044

Latest CVEs

16 CVEs, newest first

CVEs, newest first
Title
CVE-2026-115724
VLC for Android before 3.7.2 File Overwrite via Spoofed Mail Attachment ProviderVideoLAN · VLC for Android
Low2.1
CVE-2026-112283
libbluray through 1.5.1 Uncontrolled Memory Allocation via _parse_extent_start_pointsPublic exploitVideoLAN · libbluray
Medium6.8
CVE-2026-112282
VideoLAN libbluray through 1.5.1 Out-of-Bounds Read via clpi_access_pointPublic exploitVideoLAN · libbluray
Medium6.8
CVE-2026-112058
libdvdnav through 7.0.0 Out-of-Bounds Read via set_PTT JumpTTPublic exploitVideoLAN · libdvdnav
Medium6.8
CVE-2026-112057
libdvdnav before 7.0.0 Out-of-Bounds Read in dvdnav_describe_title_chaptersPublic exploitVideoLAN · libdvdnav
Medium6.8
CVE-2026-102875
VLC media player before 3.0.24 Path Traversal via skins2videolan · vlc
High8.5
CVE-2026-73324
VLC media player 3.0.0 through 3.0.23 information disclosure vulnerabilityVideoLAN · VLC media player
Medium5.3
CVE-2026-56711
VLC media player 3.0.0 through 3.0.23 memory corruption vulnerabilityVideoLAN · VLC media player
High7.3
CVE-2026-26227
VLC for Android < 3.7.0 Remote Access OTP Authentication BypassVideoLAN · VLC for Android
Medium6.3
CVE-2026-26228
VLC for Android < 3.7.0 Remote Access Path TraversalVideoLAN · VLC for Android
Low2.3
CVE-2025-51602
mmstu.c in VideoLAN VLC media player before 3.0.22 allows an out-of-bounds read and denial of service via a crafted 0x01 response from an MMS server.VideoLAN · VLC media player
Medium4.8
CVE-2024-1580
Integer overflow in VideoLAN dav1dVideoLAN · dav1d
Medium5.9
CVE-2017-8313
Heap out-of-bound read in ParseJSS in VideoLAN VLC before 2.2.5 due to missing check of string termination allows attackers to read data beyond allocated…VideoLAN · VLC
Medium5.5
CVE-2017-8312
Heap out-of-bound read in ParseJSS in VideoLAN VLC due to missing check of string length allows attackers to read heap uninitialized data via a crafted…VideoLAN · VLC
Medium5.5
CVE-2017-8311
Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before 2.2.5 due to skipping NULL terminator in an input string allows attackers to execute…Public exploitVideoLAN · VLC
High7.8
CVE-2017-8310
Heap out-of-bound read in CreateHtmlSubtitle in VideoLAN VLC 2.2.x due to missing check of string termination allows attackers to read data beyond allocated…VideoLAN · VLC
Medium5.5