CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

4,587 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 10 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	EPSS	KEV sources	Patch window	Vendor / product	Summary	Published
CVE-2026-64733	9.8	—	—	—	apple / ipados	This issue was addressed with improved data protection.	40d ago
CVE-2026-64731	9.8	—	—	—	apple / macos	A path handling issue was addressed with improved validation.	40d ago
CVE-2026-64729	9.8	—	—	—	apple / ipados	A use after free issue was addressed with improved memory management.	40d ago
CVE-2026-64727	9.8	—	—	—	apple / macos	A type confusion issue was addressed with improved memory handling.	40d ago
CVE-2026-64726	9.8	—	—	—	apple / ipados	The issue was addressed with improved memory handling.	40d ago
CVE-2026-64720	9.8	—	—	—	apple / ipados	A race condition was addressed with improved state handling.	40d ago
CVE-2026-64704	9.8	—	—	—	apple / macos	A type confusion issue was addressed with improved memory handling.	40d ago
CVE-2026-64703	9.8	—	—	—	apple / macos	A use after free issue was addressed with improved memory management.	40d ago
CVE-2026-64702	9.8	—	—	—	apple / macos	An access issue was addressed with additional sandbox restrictions.	40d ago
CVE-2026-64700	9.8	—	—	—	apple / ipados	A use after free issue was addressed with improved memory management.	40d ago
CVE-2026-64698	9.8	—	—	—	apple / macos	The issue was addressed with improved memory handling.	40d ago
CVE-2026-64697	9.8	—	—	—	apple / macos	The issue was addressed with improved memory handling.	40d ago
CVE-2026-64696	9.8	—	—	—	apple / macos	The issue was addressed with improved memory handling.	40d ago
CVE-2026-64695	9.8	—	—	—	apple / macos	The issue was addressed with improved memory handling.	40d ago
CVE-2026-64694	9.8	—	—	—	apple / macos	An integer overflow was addressed with improved input validation.	40d ago
CVE-2026-64691	9.8	—	—	—	apple / macos	A buffer overflow was addressed with improved size validation.	40d ago
CVE-2026-64541	9.8	—	—	—	—	In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF in smc_cdc_rx_handler() by pi	40d ago
CVE-2026-43822	9.8	—	—	—	apple / ipados	A use after free issue was addressed with improved memory management.	40d ago
CVE-2026-43814	9.8	—	—	—	apple / ipados	A use after free issue was addressed with improved memory management.	40d ago
CVE-2026-43812	9.8	—	—	—	apple / ipados	A use after free issue was addressed with improved memory management.	40d ago
CVE-2026-43810	9.8	—	—	—	apple / ipados	The issue was addressed with improved memory handling.	40d ago
CVE-2026-43809	9.8	—	—	—	apple / macos	An out-of-bounds read was addressed with improved bounds checking.	40d ago
CVE-2026-43807	9.8	—	—	—	apple / ipados	A buffer overflow was addressed with improved bounds checking.	40d ago
CVE-2026-43805	9.8	—	—	—	apple / ipados	A race condition was addressed with improved state handling.	40d ago
CVE-2026-43803	9.8	—	—	—	apple / ipados	An out-of-bounds write issue was addressed with improved bounds checking.	40d ago
CVE-2026-43802	9.8	—	—	—	apple / macos	An out-of-bounds write issue was addressed with improved bounds checking.	40d ago
CVE-2026-43799	9.8	—	—	—	apple / ipados	A use after free issue was addressed with improved memory management.	40d ago
CVE-2026-43793	9.8	—	—	—	apple / macos	An issue existed in the handling of environment variables.	40d ago
CVE-2026-43779	9.8	—	—	—	apple / macos	A logic issue was addressed with improved restrictions.	40d ago
CVE-2026-43778	9.8	—	—	—	apple / ipados	A use after free issue was addressed with improved memory management.	40d ago
CVE-2026-43773	9.8	—	—	—	apple / macos	An out-of-bounds read was addressed with improved bounds checking.	40d ago
CVE-2026-43769	9.8	—	—	—	apple / ipados	An integer overflow was addressed with improved input validation.	40d ago
CVE-2026-43764	9.8	—	—	—	apple / macos	An integer overflow was addressed with improved input validation.	40d ago
CVE-2026-43757	9.8	—	—	—	apple / macos	An out-of-bounds read was addressed with improved bounds checking.	40d ago
CVE-2026-43750	9.8	—	—	—	apple / macos	A buffer overflow was addressed with improved bounds checking.	40d ago
CVE-2026-43748	9.8	—	—	—	apple / macos	An out-of-bounds write issue was addressed with improved bounds checking.	40d ago
CVE-2026-43730	9.8	—	—	—	apple / ipados	A permissions issue was addressed with additional restrictions.	40d ago
CVE-2026-43710	9.8	—	—	—	apple / macos	The issue was addressed with improved memory handling.	40d ago
CVE-2026-43694	9.8	—	—	—	apple / macos	The issue was addressed with improved memory handling.	40d ago
CVE-2026-43682	9.8	—	—	—	apple / macos	The issue was addressed with improved memory handling.	40d ago
CVE-2026-39873	9.8	—	—	—	apple / macos	The issue was addressed with improved memory handling.	40d ago
CVE-2026-28982	9.8	—	—	—	apple / macos	A race condition was addressed with improved locking.	40d ago
CVE-2026-28928	9.8	—	—	—	apple / ipados	A use after free issue was addressed with improved memory management.	40d ago
CVE-2026-28911	9.8	—	—	—	apple / macos	The issue was addressed with improved memory handling.	40d ago
CVE-2026-55579	9.8	—	—	—	—	Pheditor is a single-file editor and file manager written in PHP.	40d ago
CVE-2026-63077exploited	9.8	86.5%	3/3	+9d	jetbrains / teamcity	In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent	40d ago
CVE-2026-65879	9.8	—	—	—	—	Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Bui	41d ago
CVE-2026-61511exploited	9.8	70.8%	1/3	+31d	—	vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability in the vB5_Template_Run	41d ago
CVE-2026-55971	9.8	—	—	—	apache / thrift	Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings.	41d ago
CVE-2026-64535	9.8	—	—	—	—	In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF when ddgst mismat	41d ago
CVE-2026-64534	9.8	—	—	—	—	In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check INIT_FAILED before nvmet_req_	41d ago
CVE-2026-13714	9.8	—	—	—	—	The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin before 5.3.0 does not validate the type of uplo	41d ago
CVE-2026-12394	9.8	—	—	—	—	The MemberGlut WordPress plugin before 1.1.5 does not validate the role chosen during front-end registration, allo	41d ago
CVE-2026-64530	9.8	—	—	—	—	In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: Handle TC_ACT_CONSUMED in	42d ago
CVE-2026-64523	9.8	—	—	—	—	In the Linux kernel, the following vulnerability has been resolved: net/handshake: Take a long-lived file referenc	43d ago
CVE-2026-64459	9.8	—	—	—	—	In the Linux kernel, the following vulnerability has been resolved: tcp: restore RCU grace period in tcp_ao_destro	43d ago
CVE-2026-64439	9.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - filter out async aead implement	43d ago
CVE-2026-64410	9.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: IPIP tunnel hardware off	43d ago
CVE-2026-64399	9.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: ksmbd: add permission checks for FSCTL_DUPLICA	43d ago
CVE-2026-64397	9.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: ksmbd: serialize QUERY_DIRECTORY requests per	43d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE); CISA KEV, ENISA EUVD, CIRCL and VulnCheck (exploitation status, three catalogues counted; CIRCL shown as an aggregator); FIRST EPSS (exploitation probability). Patch window is the gap between CVE publication and the earliest KEV listing, so a negative value means a catalogue called it exploited before it was disclosed. Data refreshes every five hours.

Loading

CVE Tracker