Free and open · new CVEs checked every 20 minutesStatus RSS Open data Contact

PatchTheCVE.com

Know what to patch first, and exactly how.

Every CVE is ranked by real-world risk (severity, exploitation, reach) and comes with the affected versions, the exact fix for your OS, and a clear action: upgrade, or downgrade if no fix exists yet.

See what to patch now Check my software

Checked every 20 minutes

/

Official sources NVD · CVE Program · CISA KEV · EPSS · vendor and distro advisoriesHow we score · Source status · Open data · About

Find the fix for any software CVE, KB number, advisory ID or product

Try:

Start here

!Patch nowThe highest-priority CVEs, exploited or about to be.Open → ⚠Exploited in the wildConfirmed attacks, from the CISA KEV list.Open → ✔Check my softwarePaste your packages and see what is affected.Open → ▶How it worksAn animated walkthrough, guides and the scoring method.Open →

How it works: click through collect → score → fix

Step 1 of 3

Prefer a video?

Severity mix

New CVEs, last 14 days

How PatchTheCVE works

1CollectNew and changed CVEs from NVD and the CVE Program, plus CISA's exploited list, every 20 minutes.

2ScoreEPSS, CISA SSVC, exploit code and reach turn each CVE into a 0 to 100 priority.

3Find the fixDistro, Microsoft, GitHub and OSV advisories give the fixed version, or a safe downgrade.

4PublishA page per CVE, product, vendor and patch, plus the blog, goes live automatically.

Learn more · How we score · Open data

Trending now new and high risk, last few days

Browse recent CVE pages

CVE-2026-123036 – A flaw was found in ansible-core CVE-2026-73996 – Unrestricted Upload of File with Dangerous Type vulnerability in ThemeGrill Masteriyo - LMS learning-managemen CVE-2022-2127 – An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_CVE-2026-90634 – An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a cra CVE-2026-90629 – An uncontrolled memory access in the WMF import code of Apache OpenOffice versions through 4.1.16 allows a cra CVE-2026-90628 – An uncontrolled memory access in the PDF export code of Apache OpenOffice versions through 4.1.16 allows a cra CVE-2026-59267 – A crafted DXF document causes a heap buffer overflow in Draw in Apache OpenOffice 4.1.16 and earlier CVE-2026-121256 – Use of released resource in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had comp CVE-2026-121249 – Buffer overflow in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrar CVE-2026-121241 – Use after free in Navigation in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker t CVE-2026-121238 – Use after free in Source in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrar CVE-2026-121234 – Privilege elevation in Contacts in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacke CVE-2026-121230 – Race condition in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execu CVE-2026-121226 – Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute CVE-2026-121221 – Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute CVE-2026-121219 – Integer overflow in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised CVE-2026-121218 – Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary co CVE-2026-121214 – Use after free in Passwords in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially e CVE-2026-121210 – Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary co CVE-2026-121208 – Out of bounds read in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially e CVE-2026-121202 – Use after free in Autofill in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social CVE-2026-121201 – Use after free in Animation in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbit CVE-2026-121200 – Incorrect reference resolution in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker l CVE-2026-121189 – Use after free in Browser in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitra CVE-2026-121184 – Out of bounds read in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially e CVE-2026-121183 – Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who ha CVE-2026-121182 – Use after free in DOM in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary c CVE-2026-121168 – Improper resource exposure in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker lever CVE-2026-121137 – Type confusion in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social CVE-2026-121129 – Use after free in WebRTC in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrar CVE-2026-121128 – Use after free in Scheduling in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbi CVE-2026-121127 – Use after free in WebAudio in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitr microsoft vulnerabilities google vulnerabilities linux vulnerabilities oracle vulnerabilities debian vulnerabilities apple vulnerabilities ibm vulnerabilities adobe vulnerabilities cisco vulnerabilities redhat vulnerabilities fedoraproject vulnerabilities mozilla vulnerabilities canonical vulnerabilities apache vulnerabilities opensuse vulnerabilities qualcomm vulnerabilities hp vulnerabilities netapp vulnerabilities huawei vulnerabilities siemens vulnerabilities jenkins vulnerabilities dell vulnerabilities tenda vulnerabilities intel vulnerabilities dlink vulnerabilities sap vulnerabilities sun vulnerabilities samsung vulnerabilities gitlab vulnerabilities netgear vulnerabilities gnu vulnerabilities juniper vulnerabilities fortinet vulnerabilities totolink vulnerabilities phpgurukul vulnerabilities f5 vulnerabilities vmware vulnerabilities suse vulnerabilities imagemagick vulnerabilities nvidia vulnerabilities CVEs by MITRE CVEs by GitHub, Inc.CVEs by Patchstack CVEs by kernel.org CVEs by VulDB CVEs by Microsoft Corporation CVEs by Oracle CVEs by Red Hat, Inc.CVEs by Wordfence CVEs by VulnCheck CVEs by IBM Corporation CVEs by Adobe Systems Incorporated CVEs by Apple Inc.CVEs by Chrome CVEs by Cisco Systems, Inc.CVEs by WPScan CVEs by Android (associated with Google Inc. or Open Handset Alliance)CVEs by ICS-CERT CVEs by Zero Day Initiative CVEs by JPCERT/CC CVEs by CERT/CC CVEs by Mozilla Corporation CVEs by Apache Software Foundation CVEs by Qualcomm, Inc.CVEs by Dell CVEs by Talos CVEs by huntr.dev CVEs by Intel Corporation CVEs by Huawei Technologies CVEs by Siemens AG CVEs by HackerOne CVEs by Hewlett Packard Enterprise (HPE)CVEs by Jenkins Project CVEs by SAP SE CVEs by GitLab Inc.CVEs by Samsung Mobile CVEs by NVIDIA Corporation CVEs by Spanish National Cybersecurity Institute, S.A. (INCIBE)CVEs by Juniper Networks, Inc.CVEs by MediaTek, Inc.