Public CVE feed
Public CVE records, affected versions and known exploitation, with sources you can verify.
ken678 YznCMS Auth Group Group.php Backend privileges management
YznCMS
Apache Thrift: Java TProtocolUtil.skip() does not limit the recursion depth by default
org.apache.thrift:libthrift
Apache MINA: Unsafe Deserialization (CWE-502) in JavaNativeMessageDecoder
org.apache.mina:mina-core
Visual Studio Spoofing Vulnerability
Microsoft Visual Studio 2017 version 15.9 · Microsoft Visual Studio 2019 version 16.11 · Microsoft Visual Studio 2022 version 17.14
ASP.NET Core Elevation of Privilege Vulnerability
.NET 10.0 installed on Linux · .NET 10.0 installed on Mac OS · .NET 10.0 installed on Windows
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based)
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software · Cisco Secure Firewall Threat Defense (FTD) Software
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based)
Apache SIS: CWE-22: improper limitation of paths to GML, GeoTIFF, NADCON or NTv2 files
org.apache.sis:sis-metadata
Out-of-Bounds Write in Google Brotli Decoder
github.com/google/brotli
RCE via stale global state
php-src
RCE via OOM corruption
php-src
Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability
Microsoft Identity Client for NodeJS
Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the w
Connect Secure
ipv4: free inet_opt and ireq_opt after an RCU grace period
Linux
Linux Kernel Elevation of Privilege Vulnerability
Linux 3P (Third Party) Distros
Microsoft SQL Server Information Disclosure Vulnerability
Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR)
Microsoft SQL Server Denial of Service Vulnerability
Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2022 for x64-based Systems (CU27) · Microsoft SQL Server 2025 for x64-based Systems (CU9)
Microsoft SQL Server Remote Code Execution Vulnerability
Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32) · Microsoft SQL Server 2022 (GDR)
Microsoft QUIC Remote Code Execution Vulnerability
.NET 10.0 runtime · .NET 11.0 runtime · .NET 8.0 runtime
Windows SmartScreen Security Feature Bypass Vulnerability
Windows 11 Version 24H2 · Windows 11 Version 25H2 · Windows 11 version 26H1
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Windows 10 Version 1809 · Windows Server 2019 · Windows Server 2019 (Server Core installation)
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Windows 10 Version 1607 · Windows 10 Version 1809 · Windows 10 Version 21H2
Windows Backup Engine Elevation of Privilege Vulnerability
Windows 10 Version 21H2 · Windows 10 Version 22H2 · Windows 11 version 23H2
Windows Autopilot Elevation of Privilege Vulnerability
Windows 11 Version 24H2 · Windows 11 Version 25H2 · Windows 11 Version 26H2
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
Windows Server 2022
Windows Kerberos Elevation of Privilege Vulnerability
Windows 10 Version 1607 · Windows 10 Version 1809 · Windows 10 Version 21H2
Active Directory Federation Services (AD FS) Spoofing Vulnerability
Windows 10 Version 1607 · Windows 10 Version 1809 · Windows 10 Version 21H2
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Windows 11 Version 24H2 · Windows 11 Version 25H2 · Windows 11 version 26H1
Role: DNS Server Information Disclosure Vulnerability
Windows 10 Version 1607 · Windows 10 Version 1809 · Windows 10 Version 21H2
Sources: official CVE Program records and CISA KEV. The catalogue starts with recently changed records and selected exploited CVEs, and grows through exact-ID lookups. It is not a complete copy of the CVE List. Updates are attempted hourly.