Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 406,523All CVEsplus 19,172 rejected
  • 733Last 24 hours4,945 in the last 7 days
  • 16,825Last 30 days1,477 of them critical
  • 1,781Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
2026181001010

Latest CVEs

10 CVEs, newest first

CVEs, newest first
Title
CVE-2026-124279
Streaming request body limit enforced only after an 8 MB read in elixir-grpc grpc_serverelixir-grpc · grpc_server
High8.2
CVE-2026-121809
CPU exhaustion via a truncated gRPC message on streaming RPCs in elixir-grpc grpc_serverelixir-grpc · grpc_server
High8.2
CVE-2026-124278
Path bindings ignored for gRPC Content-Types on transcoded routes in elixir-grpc grpc_serverelixir-grpc · grpc_server
High7.6
CVE-2026-121808
Memory exhaustion via compressed Erlang terms in the elixir-grpc Erlpack codecelixir-grpc · grpc
High8.2
CVE-2026-123635
Refused calls drain the HTTP/2 connection flow-control window in elixir-grpc grpc_serverelixir-grpc · grpc_server
Medium6.3
CVE-2026-71397
Unbounded request body accumulation on streaming RPCs causes memory exhaustion in grpc_serverPublic exploitelixir-grpc · grpc_server
High8.2
CVE-2026-48853
Remote code execution and denial of service via unsafe Erlang term deserialization in elixir-grpc/grpcPublic exploitelixir-grpc · grpc
Critical9.2
CVE-2026-53430
grpc gzip decompression bomb in GRPC.Compressor.Gzip.decompress/1Public exploitelixir-grpc · grpc
High8.7
CVE-2026-48599
Authorization bypass via path binding override in elixir-grpc/grpc HTTP transcodingPublic exploitelixir-grpc · grpc
High7.6
CVE-2026-48854
Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpcPublic exploitelixir-grpc · grpc
High8.7