Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 6,933 published records · 23 KEV · 6,933 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

6,933 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit5588.0%
High2,11831%
Med2,24432%
Low2403.5%
None90.13%
Legacy00.00%
Unscored1,76425%

Matching records by UTC month

May 266,933

Signal coverage

KEV-listed: 23
With a forecast: 6,933
Unknown date: 0
Unscored severity: 1,764

Share of cohort: KEV 0.33% · forecast 100% · unscored 25%.

Showing 1701–1720 of 6,933By severity band: Critical · 9.0–10.0 558, High · 7.0–8.9 2,118, Medium · 4.0–6.9 2,244, Low · 0.1–3.9 240, None · scored 0.0 9, Legacy · v2 only 0, Unscored · no CNA metric 1,764

MedPublished 27 May 2026, 00:26 WIB

CVE-2025-33221

CVE-2025-33221

NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where a user could cause an incorrect permission assignment for a critical resource. A successful exploit of this vulnerability might lead to data tampering and denial of service.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-26T17:26:29.463Z. Updated 2026-05-27T15:36:35.699Z.

CVSS4.4v3.1KEVNot listedEPSSPresentUpdated27 May 2026, 22:36 WIB

Official record

MedPublished 27 May 2026, 00:25 WIB

CVE-2026-24201

CVE-2026-24201

NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause an out-of-bound access. A successful exploit of this vulnerability might lead to data tampering, denial of service, or information disclosure.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-26T17:25:24.217Z. Updated 2026-05-27T15:47:19.731Z.

Showing 1701 to 1720 of 6933.First page Next page

CVSS5.8v3.1

KEVNot listed

EPSSPresent

Updated27 May 2026, 22:47 WIB

Official record

HighPublished 27 May 2026, 00:24 WIB

CVE-2026-24200

CVE-2026-24200

NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause a use-after-free for stack memory. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.

Excerpt language: en.

Severity high: primary CNA CVSS 7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-26T17:24:48.456Z. Updated 2026-05-27T15:46:42.305Z.

CVSS7v3.1KEVNot listedEPSSPresentUpdated27 May 2026, 22:46 WIB

Official record

MedPublished 27 May 2026, 00:24 WIB

CVE-2026-44749

Information Disclosure vulnerability in SAP Gateway

The SAP Gateway allows attackers to inject content into error messages, potentially leading to disclosure of request artefacts (e.g., regex patterns) and revealing underlying URI parsing logic. Leading to low impact on confidentiality. Integrity and availability are unaffected.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-26T17:24:33.329Z. Updated 2026-05-26T18:36:16.647Z.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated27 May 2026, 01:36 WIB

Official record

HighPublished 27 May 2026, 00:24 WIB

CVE-2026-24194

CVE-2026-24194

NVIDIA Display Driver for Linux contains a vulnerability in a kernel mode layer handler, where a user could cause improper permission handling. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-26T17:24:13.664Z. Updated 2026-05-27T15:41:55.643Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated27 May 2026, 22:41 WIB

Official record

HighPublished 27 May 2026, 00:23 WIB

CVE-2026-24191

CVE-2026-24191

NVIDIA Display Driver for Windows contains a vulnerability where an attacker could cause a time-of-check time-of-use issue. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-26T17:23:25.753Z. Updated 2026-05-27T15:40:06.029Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated27 May 2026, 22:40 WIB

Official record

HighPublished 27 May 2026, 00:22 WIB

CVE-2026-24190

CVE-2026-24190

NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause improper access to GPU resources. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-26T17:22:41.269Z. Updated 2026-05-27T15:39:23.833Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated27 May 2026, 22:39 WIB

Official record

HighPublished 27 May 2026, 00:21 WIB

CVE-2026-24193

CVE-2026-24193

NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-26T17:21:42.334Z. Updated 2026-05-27T15:41:19.055Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated27 May 2026, 22:41 WIB

Official record

HighPublished 27 May 2026, 00:20 WIB

CVE-2026-24196

CVE-2026-24196

NVIDIA Display Driver for Linux contains a vulnerability where a user could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to denial of service and information disclosure.

Excerpt language: en.

Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-26T17:20:25.479Z. Updated 2026-05-27T15:43:31.436Z.

CVSS7.1v3.1KEVNot listedEPSSPresentUpdated27 May 2026, 22:43 WIB

Official record

CritPublished 27 May 2026, 00:19 WIB

CVE-2026-8633

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when using when using Web Server Plug-ins

IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to remote code execution in the Web Server Plug-ins, through a specially crafted request.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-26T17:19:55.470Z. Updated 2026-05-27T11:55:40.403Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated27 May 2026, 18:55 WIB

Official record

MedPublished 27 May 2026, 00:19 WIB

CVE-2026-24197

CVE-2026-24197

NVIDIA Display Driver for Linux contains a vulnerability in the Multi-Instance GPU (MIG) partition management, where an insecure default initialization of memory subsystem routing resources could lead to data corruption or a hang during partition reconfiguration. A successful exploit of this vulnerability might lead to…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-26T17:19:40.408Z. Updated 2026-05-27T15:44:16.401Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated27 May 2026, 22:44 WIB

Official record

MedPublished 27 May 2026, 00:18 WIB

CVE-2026-24199

CVE-2026-24199

NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering compiler or processor memory instructions. A successful exploit of this vulnerability might lead to denial of service.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-26T17:18:50.759Z. Updated 2026-05-27T15:45:30.532Z.

CVSS4.7v3.1KEVNot listedEPSSPresentUpdated27 May 2026, 22:45 WIB

Official record

MedPublished 27 May 2026, 00:17 WIB

CVE-2026-24198

CVE-2026-24198

NVIDIA GPU Display Driver for Linux contains a vulnerability where an advanced attacker could use a race condition to leak sensitive memory, which might cause limited exposure of sensitive information to an unauthorized actor. A successful exploit of this vulnerability might lead to denial of service, data tampering, …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-26T17:17:54.052Z. Updated 2026-05-27T15:44:45.771Z.

CVSS5.6v3.1KEVNot listedEPSSPresentUpdated27 May 2026, 22:44 WIB

Official record

MedPublished 27 May 2026, 00:16 WIB

CVE-2026-24182

CVE-2026-24182

NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could leak held driver locks. A successful exploit of this vulnerability might lead to denial of service.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-26T17:16:42.147Z. Updated 2026-05-27T15:37:52.121Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated27 May 2026, 22:37 WIB

Official record

HighPublished 27 May 2026, 00:15 WIB

CVE-2026-24195

CVE-2026-24195

NVIDIA Display Driver for Linux contains a vulnerability in UVM, where a user could cause improper input validation. A successful exploit of this vulnerability might lead to denial of service.

Excerpt language: en.

Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-26T17:15:30.817Z. Updated 2026-05-26T18:38:21.943Z.

CVSS7.1v3.1KEVNot listedEPSSPresentUpdated27 May 2026, 01:38 WIB

Official record

HighPublished 27 May 2026, 00:15 WIB

CVE-2026-8620

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when using when using Web Server Plug-ins

IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to HTTP request smuggling in the Web Server Plug-ins through a specially crafted request.

Excerpt language: en.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-26T17:15:00.501Z. Updated 2026-05-27T13:12:59.224Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated27 May 2026, 20:12 WIB

Official record

HighPublished 27 May 2026, 00:14 WIB

CVE-2026-24192

CVE-2026-24192

NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause an incorrect conversion between numeric types, leading to a heap buffer overflow. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-26T17:14:31.794Z. Updated 2026-05-27T15:40:46.679Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated27 May 2026, 22:40 WIB

Official record

HighPublished 27 May 2026, 00:12 WIB

CVE-2026-24187

CVE-2026-24187

NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.

Excerpt language: en.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-26T17:12:42.081Z. Updated 2026-05-27T15:38:40.976Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated27 May 2026, 22:38 WIB

Official record

HighPublished 27 May 2026, 00:11 WIB

CVE-2026-8835

IBM HTTP Server is affected by multiple vulnerabilities

IBM HTTP Server 8.5, and 9.0 is vulnerable to invalid pointer dereference. A privileged user, authenticated to the Administration Server, could exploit this vulnerability to expose sensitive information or cause a denial of service.

Excerpt language: en.

Severity high: primary CNA CVSS 7.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-26T17:11:19.853Z. Updated 2026-05-26T18:52:37.441Z.

CVSS7.3v3.1KEVNot listedEPSSPresentUpdated27 May 2026, 01:52 WIB

Official record

HighPublished 27 May 2026, 00:10 WIB

CVE-2026-8834

IBM HTTP Server is affected by multiple vulnerabilities

IBM HTTP Server 8.5, and 9.0 contains a buffer overflow vulnerability. A privileged user, authenticated to the Administration Server, could exploit this vulnerability to execute remote code or cause a denial of service.

Excerpt language: en.

Severity high: primary CNA CVSS 8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-26T17:10:24.502Z. Updated 2026-05-28T03:55:40.361Z.

CVSS8v3.1KEVNot listedEPSSPresentUpdated28 May 2026, 10:55 WIB

Official record