Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 405,749All CVEsplus 19,170 rejected
- 378Last 24 hours4,866 in the last 7 days
- 16,927Last 30 days1,491 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 3 | 10 | 1 | 0 | 16 | 128 |
| 2025 | 0 | 11 | 3 | 0 | 0 | 14 | 112 |
| 2024 | 1 | 11 | 8 | 0 | 0 | 20 | 98 |
| 2023 | 4 | 10 | 11 | 0 | 0 | 25 | 78 |
| 2022 | 0 | 7 | 6 | 0 | 0 | 13 | 53 |
| 2021 | 2 | 7 | 11 | 3 | 0 | 23 | 40 |
| 2020 | 4 | 9 | 4 | 0 | 0 | 17 | 17 |
| Title | ||
|---|---|---|
| CVE-2026-126957 | ICMPv4 Record Route / Timestamp option: stack OOB read via ptr underflow in icmpv4.czephyrproject-rtos · Zephyr | Medium6.9 |
| CVE-2026-13351 | net: Maliciously fragmented IPv6 packets can prevent receiving/processing future incoming packetszephyrproject-rtos · Zephyr | High7.5 |
| CVE-2026-5068 | bt: l2cap le coc: remote oob write via seg counter stored in net_buf user_datazephyrproject-rtos · Zephyr | High7.6 |
| CVE-2026-5067 | Out-of-bounds read/write in HTTP WebSocket upgrade via non-null-terminated Sec-WebSocket-KeyPublic exploitzephyrproject-rtos · Zephyr | Critical9.8 |
| CVE-2026-5066 | net: sockets: tls: Potential out-of-bounds write/read in socket_op_vtable::connect functionPublic exploitzephyrproject-rtos · Zephyr | Medium6.3 |
| CVE-2026-5589 | Out-of-bounds write caused by an integer underflow in the Bluetooth Mesh subsystem.zephyrproject-rtos · Zephyr | Medium6.3 |
| CVE-2026-5071 | can: Local Denial of Service via SocketCAN Sendzephyrproject-rtos · Zephyr | Medium6.1 |
| CVE-2026-5072 | ptp: Potential Denial of Service via PTP Interval Shiftzephyrproject-rtos · Zephyr | Medium6.5 |
| CVE-2026-1681 | net: Stack Overflow with Ping (to own IP Address) via Shellzephyrproject-rtos · Zephyr | Medium6.1 |
| CVE-2026-1677 | net: TLS 1.2 connections allowed on TLS 1.3 socketsPublic exploitzephyrproject-rtos · Zephyr | Medium5.3 |
| CVE-2026-5590 | net: ip/tcp: Null pointer dereference can be triggered by a race conditionzephyrproject-rtos · Zephyr | Medium6.4 |
| CVE-2026-1679 | net: eswifi socket send payload length not boundedPublic exploitzephyrproject-rtos · Zephyr | High7.3 |
| CVE-2026-4179 | stm32: usb: Infinite while loop in Interrupt HandlerPublic exploitzephyrproject-rtos · Zephyr | Medium6.1 |
| CVE-2026-0849 | crypto: ATAES132A response length allows stack buffer overflowPublic exploitzephyrproject-rtos · Zephyr | Low3.8 |
| CVE-2026-1678 | dns: memory‑safety issue in the DNS name parserPublic exploitzephyrproject-rtos · Zephyr | Critical9.4 |
| CVE-2025-12899 | net: icmp: Out of bound memory readzephyrproject-rtos · Zephyr | Medium6.5 |
| CVE-2025-12035 | Bluetooth: Integer Overflow in Bluetooth Classic (BR/EDR) L2CAPzephyrproject-rtos · Zephyr | Medium6.5 |
| CVE-2025-9557 | Bluetooth: Mesh: Out-of-Bound Write in gen_prov_contzephyrproject-rtos · Zephyr | High7.6 |
| CVE-2025-9558 | Bluetooth: Mesh: Out-of-Bound Write in gen_prov_startzephyrproject-rtos · Zephyr | High7.6 |
| CVE-2025-9408 | Userspace privilege escalation vulnerability on Cortex Mzephyrproject-rtos · Zephyr | High8.2 |
| CVE-2025-12890 | Bluetooth: peripheral: Invalid handling of malformed connection requestzephyrproject-rtos · Zephyr | Medium6.5 |
| CVE-2025-10456 | Bluetooth: Semi-Arbitrary ability to make the BLE Target send disconnection requestszephyrproject-rtos · Zephyr | High7.1 |
| CVE-2025-10458 | Bluetooth: le_conn_rsp does not sanitize CID, MTU, MPS valueszephyrproject-rtos · Zephyr | High7.6 |
| CVE-2025-7403 | Bluetooth: bt_conn_tx_processor unsafe handlingzephyrproject-rtos · Zephyr | High7.6 |
| CVE-2025-10457 | Bluetooth: Out-Of-Context le_conn_rsp Handlingzephyrproject-rtos · Zephyr | Medium4.3 |
| CVE-2025-2962 | Infinite loop in dns_copy_qnamezephyrproject-rtos · Zephyr | High8.2 |
| CVE-2025-1675 | Out of bounds read in dns_copy_qnamezephyrproject-rtos · Zephyr | High8.2 |
| CVE-2025-1674 | Out of bounds read when unpacking DNS answerszephyrproject-rtos · Zephyr | High8.2 |
| CVE-2025-1673 | Out of bounds read when calling crc16_ansi and strlen in dns_validate_msgzephyrproject-rtos · Zephyr | High8.2 |
| CVE-2024-10395 | net: lib: http_server: Buffer Under-readPublic exploitzephyrproject-rtos · Zephyr | High8.6 |
| CVE-2024-8798 | Bluetooth: classic: avdtp: missing buffer length checkzephyrproject-rtos · Zephyr | High7.5 |
| CVE-2024-11263 | arch: riscv: userspace: potential security risk when CONFIG_RISCV_GP=yzephyrproject-rtos · Zephyr | Critical9.4 |
| CVE-2024-6444 | Bluetooth: ots: missing buffer length checkPublic exploitzephyrproject-rtos · Zephyr | Medium6.3 |
| CVE-2024-6443 | zephyr: out-of-bound read in utf8_truncPublic exploitzephyrproject-rtos · Zephyr | Medium6.3 |
| CVE-2024-6442 | Bluetooth: ASCS Unchecked tailroom of the response bufferPublic exploitzephyrproject-rtos · Zephyr | Medium6.3 |
| CVE-2024-6259 | BT: HCI: adv_ext_report Improper discarding in adv_ext_reportPublic exploitzephyrproject-rtos · Zephyr | High7.6 |
| CVE-2024-6137 | BT: Classic: SDP OOB access in get_att_search_listPublic exploitzephyrproject-rtos · Zephyr | High7.6 |
| CVE-2024-6135 | BT:Classic: Multiple missing buf length checksPublic exploitzephyrproject-rtos · Zephyr | High7.6 |
| CVE-2024-5931 | BT: Unchecked user input in bap_broadcast_assistantPublic exploitzephyrproject-rtos · Zephyr | Medium6.3 |
| CVE-2024-6258 | BT: Missing length checks of net_buf in rfcomm_handle_dataPublic exploitzephyrproject-rtos · Zephyr | Medium6.8 |
| CVE-2024-5754 | BT: Encryption procedure host vulnerabilityzephyrproject-rtos · Zephyr | High8.2 |
| CVE-2024-4785 | BT: Missing Check in LL_CONNECTION_UPDATE_IND Packet Leads to Division by Zerozephyrproject-rtos · Zephyr | High7.6 |
| CVE-2024-3332 | bt: host/smp: DoS caused by null pointer dereferencezephyrproject-rtos · Zephyr | Medium6.5 |
| CVE-2024-3077 | Bluetooth: integer underflow in gatt_find_info_rspzephyrproject-rtos · Zephyr | Medium6.8 |
| CVE-2023-7060 | Missing Security Control in Zephyr OS IP Packet Handlingzephyrproject-rtos · Zephyr | High8.6 |
| CVE-2023-6881 | fs: fuse: buffer overflow vulnerability in the Zephyr FSzephyrproject-rtos · Zephyr | High7.3 |
| CVE-2024-1638 | Bluetooth characteristic LESC security requirement not enforced without additional flagszephyrproject-rtos · Zephyr | High8.2 |
| CVE-2023-5779 | can: out of bounds in remove_rx_filter functionzephyrproject-rtos · Zephyr | Medium4.4 |
| CVE-2023-6249 | ipm: signed to unsigned conversion problem in esp32_ipm_sendzephyrproject-rtos · Zephyr | High8.0 |
| CVE-2023-6749 | Unchecked user input length in the Zephyr Settings Shellzephyrproject-rtos · Zephyr | High8.0 |