Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 406,568All CVEsplus 19,172 rejected
  • 371Last 24 hours4,808 in the last 7 days
  • 16,733Last 30 days1,466 of them critical
  • 1,781Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
202604400811
20250000003
20240100013
20230110022

Latest CVEs

11 CVEs, newest first

CVEs, newest first
Title
CVE-2026-83597
Netdata: Local Privilege Escalation in Netdata Windows Agent installer via MSI Repair ExecutionPublic exploitnetdata · netdata
High7.0
CVE-2026-83600
Netdata: Streaming protocol chart slot guard off-by-one allows ~16 GiB allocation request, crashing parent agentPublic exploitnetdata · netdata
Medium6.5
CVE-2026-83598
Netdata: Local Privilege Escalation in Netdata Agent Windows installer via PowerShell Profile Hijack in MSI RepairPublic exploitnetdata · netdata
High7.8
CVE-2026-83603
Netdata: Local Root via ndsudo Arbitrary socket_path → fail2ban-client Pickle RCEnetdata · netdata
High8.4
CVE-2026-83601
Netdata: Streaming protocol dimension slot has no upper-bound guard, allowing integer overflow and out-of-bounds writePublic exploitnetdata · netdata
Medium6.5
CVE-2026-83602
Netdata: Unauthenticated remote PUT to /api/v3/settings bypasses IP allowlist controls via HTTP_ACL_NOCHECKPublic exploitnetdata · netdata
Medium6.5
CVE-2026-83599
Netdata: WebSocket Decompression Bombnetdata · netdata
High7.5
CVE-2025-71385
Netdata < 2.3.1 - Reflected Cross-Site Scripting via love Parameter in ilove.svg Endpointnetdata · netdata
Medium5.1
CVE-2024-32019
ndsudo: local privilege escalation via untrusted search pathPublic exploitnetdata · netdata
High8.8
CVE-2023-22497
Netdata is vulnerable to improper authenticationPublic exploitnetdata · netdata
Medium6.5
CVE-2023-22496
Netdata vulnerable to command injectionPublic exploitnetdata · netdata
High8.1