Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 402,221All CVEsplus 19,142 rejected
  • 265Last 24 hours3,267 in the last 7 days
  • 16,862Last 30 days1,541 of them critical
  • 1,769Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
202601300412
20250062088

Latest CVEs

12 CVEs, newest first

CVEs, newest first
Title
CVE-2026-90648
wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack. It does…Public exploitWebAssembly · wabt
High7.1
CVE-2026-8257
WebAssembly Binaryen BrOn wasm-ir-builder.cpp makeBrOn assertionPublic exploitWebAssembly · Binaryen
Medium4.8
CVE-2025-15412
WebAssembly wabt wasm-decompile VarName out-of-boundsPublic exploitWebAssembly · wabt
Medium4.8
CVE-2025-15411
WebAssembly wabt wasm-decompile InsertNode memory corruptionPublic exploitWebAssembly · wabt
Medium4.8
CVE-2025-14957
WebAssembly Binaryen IRBuilder wasm-ir-builder.cpp makeLocalTee null pointer dereferencePublic exploitWebAssembly · Binaryen
Medium4.8
CVE-2025-14956
WebAssembly Binaryen wasm-binary.cpp readExport heap-based overflowPublic exploitWebAssembly · Binaryen
Medium4.8
CVE-2025-6275
WebAssembly wabt binary-reader-interp.cc GetFuncOffset use after freePublic exploitWebAssembly · wabt
Medium4.8
CVE-2025-6274
WebAssembly wabt binary-reader-interp.cc OnDataCount resource consumptionPublic exploitWebAssembly · wabt
Medium4.8
CVE-2025-6273
WebAssembly wabt binary-reader-objdump.cc LogOpcode assertionPublic exploitWebAssembly · wabt
Medium4.8
CVE-2025-3122
WebAssembly wabt binary-reader-interp.cc BeginFunctionBody null pointer dereferencePublic exploitWebAssembly · wabt
Low2.3
CVE-2025-2584
WebAssembly wabt binary-reader-interp.cc GetReturnCallDropKeepCount heap-based overflowPublic exploitWebAssembly · wabt
Low2.3
CVE-2025-2368
WebAssembly wabt Malformed File binary-reader-interp.cc OnExport heap-based overflowPublic exploitWebAssembly · wabt
Medium5.3