Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,433 published records · 11 KEV · 3,433 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,433 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1935.6%
High95028%
Med1,50344%
Low752.2%
None00.00%
Legacy00.00%
Unscored71221%

Matching records by UTC month

Dec 243,433

Signal coverage

KEV-listed: 11
With a forecast: 3,433
Unknown date: 0
Unscored severity: 712

Share of cohort: KEV 0.32% · forecast 100% · unscored 21%.

Showing 261–280 of 3,433By severity band: Critical · 9.0–10.0 193, High · 7.0–8.9 950, Medium · 4.0–6.9 1,503, Low · 0.1–3.9 75, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 712

UnscoredPublished 28 Dec 2024, 16:46 WIB

CVE-2024-56682

irqchip/riscv-aplic: Prevent crash when MSI domain is missing

In the Linux kernel, the following vulnerability has been resolved: irqchip/riscv-aplic: Prevent crash when MSI domain is missing If the APLIC driver is probed before the IMSIC driver, the parent MSI domain will be missing, which causes a NULL pointer dereference in msi_create_device_irq_domain(). Avoid this by defe…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-28T09:46:10.418Z. Updated 2026-05-11T20:57:13.606Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:57 WIB

Official record

HighPublished 28 Dec 2024, 16:46 WIB

CVE-2024-56681

crypto: bcm - add error check in the ahash_hmac_init function

In the Linux kernel, the following vulnerability has been resolved: crypto: bcm - add error check in the ahash_hmac_init function The ahash_init functions may return fails. The ahash_hmac_init should not return ok when ahash_init returns error. For an example, ahash_init will return -ENOMEM when allocation memory is …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 261 to 280 of 3433.First page Next page

Published 2024-12-28T09:46:09.675Z. Updated 2026-10-15T21:51:48.722Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated16 Oct 2026, 04:51 WIB

Official record

UnscoredPublished 28 Dec 2024, 16:46 WIB

CVE-2024-56680

media: intel/ipu6: do not handle interrupts when device is disabled

In the Linux kernel, the following vulnerability has been resolved: media: intel/ipu6: do not handle interrupts when device is disabled Some IPU6 devices have shared interrupts. We need to handle properly case when interrupt is triggered from other device on shared irq line and IPU6 itself disabled. In such case we g…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-28T09:46:08.936Z. Updated 2026-05-11T20:57:11.131Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:57 WIB

Official record

UnscoredPublished 28 Dec 2024, 16:46 WIB

CVE-2024-56679

octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c Add error pointer check after calling otx2_mbox_get_rsp().

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-28T09:46:08.124Z. Updated 2026-05-11T20:57:09.996Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:57 WIB

Official record

UnscoredPublished 28 Dec 2024, 16:46 WIB

CVE-2024-56678

powerpc/mm/fault: Fix kfence page fault reporting

In the Linux kernel, the following vulnerability has been resolved: powerpc/mm/fault: Fix kfence page fault reporting copy_from_kernel_nofault() can be called when doing read of /proc/kcore. /proc/kcore can have some unmapped kfence objects which when read via copy_from_kernel_nofault() can cause page faults. Since *…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-28T09:46:07.256Z. Updated 2026-05-11T20:57:08.863Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:57 WIB

Official record

HighPublished 28 Dec 2024, 16:46 WIB

CVE-2024-56677

powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init()

In the Linux kernel, the following vulnerability has been resolved: powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init() During early init CMA_MIN_ALIGNMENT_BYTES can be PAGE_SIZE, since pageblock_order is still zero and it gets initialized later during initmem_init() e.g. setup_arch() -> initmem…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-28T09:46:06.497Z. Updated 2026-08-05T11:46:01.649Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:46 WIB

Official record

UnscoredPublished 28 Dec 2024, 16:46 WIB

CVE-2024-56676

thermal: testing: Initialize some variables annoteded with _free()

In the Linux kernel, the following vulnerability has been resolved: thermal: testing: Initialize some variables annoteded with _free() Variables annotated with __free() need to be initialized if the function can return before they get updated for the first time or the attempt to free the memory pointed to by them upo…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-28T09:46:05.536Z. Updated 2026-05-11T20:57:06.566Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:57 WIB

Official record

MedPublished 28 Dec 2024, 14:16 WIB

CVE-2023-52718

CVE-2023-52718

A connection hijacking vulnerability exists in some Huawei home routers. Successful exploitation of this vulnerability may cause DoS or information leakage.(Vulnerability ID:HWPSIRT-2023-34408) This vulnerability has been assigned a (CVE)ID:CVE-2023-52718

Excerpt language: en.

Severity medium: primary CNA CVSS 6.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-28T07:16:22.248Z. Updated 2024-12-28T16:09:42.678Z.

CVSS6.4v3.1KEVNot listedEPSSPresentUpdated28 Dec 2024, 23:09 WIB

Official record

HighPublished 28 Dec 2024, 14:02 WIB

CVE-2023-7263

CVE-2023-7263

Some Huawei home music system products have a path traversal vulnerability. Successful exploitation of this vulnerability may cause unauthorized file deletion or file permission change.(Vulnerability ID:HWPSIRT-2023-53450) This vulnerability has been assigned a (CVE)ID:CVE-2023-7263

Excerpt language: en.

Severity high: primary CNA CVSS 7.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-28T07:02:47.815Z. Updated 2024-12-28T16:15:44.746Z.

CVSS7.3v3.1KEVNot listedEPSSPresentUpdated28 Dec 2024, 23:15 WIB

Official record

HighPublished 28 Dec 2024, 14:00 WIB

CVE-2023-7266

CVE-2023-7266

Some Huawei home routers have a connection hijacking vulnerability. Successful exploitation of this vulnerability may cause DoS or information leakage.(Vulnerability ID:HWPSIRT-2023-76605) This vulnerability has been assigned a (CVE)ID:CVE-2023-7266

Excerpt language: en.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-28T07:00:51.369Z. Updated 2024-12-28T16:18:05.578Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated28 Dec 2024, 23:18 WIB

Official record

MedPublished 28 Dec 2024, 13:53 WIB

CVE-2022-48470

CVE-2022-48470

Huawei HiLink AI Life product has an identity authentication bypass vulnerability. Successful exploitation of this vulnerability may allow attackers to access restricted functions.(Vulnerability ID:HWPSIRT-2022-42291) This vulnerability has been assigned a (CVE)ID:CVE-2022-48470

Excerpt language: en.

Severity medium: primary CNA CVSS 4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-28T06:53:40.310Z. Updated 2024-12-28T16:20:26.737Z.

CVSS4v3.1KEVNot listedEPSSPresentUpdated28 Dec 2024, 23:20 WIB

Official record

UnscoredPublished 28 Dec 2024, 13:50 WIB

CVE-2021-22484

CVE-2021-22484

Some Huawei wearables have a vulnerability of not verifying the actual data size when reading data. Successful exploitation of this vulnerability may cause a server out of memory (OOM).

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-28T06:50:40.877Z. Updated 2024-12-28T16:25:52.298Z.

CVSS—KEVNot listedEPSSPresentUpdated28 Dec 2024, 23:25 WIB

Official record

HighPublished 28 Dec 2024, 13:47 WIB

CVE-2021-37000

CVE-2021-37000

Some Huawei wearables have a permission management vulnerability.

Excerpt language: en.

Severity high: primary CNA CVSS 7.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-28T06:47:41.434Z. Updated 2024-12-28T16:30:46.102Z.

CVSS7.7v3.1KEVNot listedEPSSPresentUpdated28 Dec 2024, 23:30 WIB

Official record

LowPublished 28 Dec 2024, 13:37 WIB

CVE-2020-1824

CVE-2020-1824

There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-28T06:37:14.149Z. Updated 2024-12-28T16:32:25.200Z.

CVSS3.7v3.1KEVNot listedEPSSPresentUpdated28 Dec 2024, 23:32 WIB

Official record

LowPublished 28 Dec 2024, 13:29 WIB

CVE-2020-1823

CVE-2020-1823

There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-28T06:29:49.051Z. Updated 2024-12-28T16:33:45.933Z.

CVSS3.7v3.1KEVNot listedEPSSPresentUpdated28 Dec 2024, 23:33 WIB

Official record

LowPublished 28 Dec 2024, 13:21 WIB

CVE-2020-1822

CVE-2020-1822

There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-28T06:21:04.473Z. Updated 2024-12-28T16:34:41.792Z.

CVSS3.7v3.1KEVNot listedEPSSPresentUpdated28 Dec 2024, 23:34 WIB

Official record

LowPublished 28 Dec 2024, 13:16 WIB

CVE-2020-1821

CVE-2020-1821

There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-28T06:16:58.770Z. Updated 2024-12-30T16:13:03.624Z.

CVSS3.7v3.1KEVNot listedEPSSPresentUpdated30 Dec 2024, 23:13 WIB

Official record

LowPublished 28 Dec 2024, 13:11 WIB

CVE-2020-1820

CVE-2020-1820

There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-28T06:11:17.446Z. Updated 2024-12-31T17:17:05.860Z.

CVSS3.7v3.1KEVNot listedEPSSPresentUpdated01 Jan 2025, 00:17 WIB

Official record

UnscoredPublished 28 Dec 2024, 11:58 WIB

CVE-2024-43705

GPU DDK - Security: Exploitable PVRSRVBridgePhysmemWrapExtMem may lead to overwrite read-only file/memory (e.g. libc.so)

Software installed and run as a non-privileged user can trigger the GPU kernel driver to write to arbitrary read-only system files that have been mapped into application memory.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-28T04:58:08.905Z. Updated 2024-12-28T16:38:31.462Z.

CVSS—KEVNot listedEPSSPresentUpdated28 Dec 2024, 23:38 WIB

Official record

UnscoredPublished 28 Dec 2024, 11:56 WIB

CVE-2024-46973

Exploitable kernel use-after-free on psServerMMUContext due to reference count mismanagement

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-28T04:56:30.585Z. Updated 2024-12-28T16:41:57.766Z.

CVSS—KEVNot listedEPSSPresentUpdated28 Dec 2024, 23:41 WIB

Official record