Every change, newest first

What a record said when it was published, what it says now, and the commit that changed it.

11,431 changes · newest first · grouped by dayCSV JSON RSS

Counted changes, newest first, one line per change to a CVE record, or per run of identical changes collapsed into one line.
Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin.	Kind	Record, Which record was edited, by its CVE id, or how many records one collapsed line stands on.	Vendor · product, The vendor and product a CVE record names, with the organisation that publishes the record under them; or the package an advisory names and its registry.	What changed	Days to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong.
Wed 10 Jun 2026· 19 record changes
2026-06-10	Fix version moved	CVE-2026-45482	microsoftmicrosoft visual studio code copilot chat extension	stated at publication 1.123.1, now states 1.123.2Release branch starts at 0.27.0.	Days to revision 1
2026-06-10	Product added	CVE-2026-4874	red hat	not named as affected at publication, now names red hat build of keycloak 26.6	Days to revision 77
2026-06-102 commits	Product added	Show all 4 CVE records in this change: Product added: rbe970 named as affected from netgearHide the 4 CVE records in this change: Product added: rbe970 named as affected from netgear	netgear	not named as affected at publication, now names rbe970Branches and original-value intervals are stated on each row.	Days to revision 1
2026-06-10	same kind of change as the line above	CVE-2026-3088	same vendor as the line above	same change as the line above	Days to revision 1
2026-06-10	same kind of change as the line above	CVE-2026-0411	same vendor as the line above	same change as the line above	Days to revision 1
2026-06-10	same kind of change as the line above	CVE-2026-0414	same vendor as the line above	same change as the line above	Days to revision 1
2026-06-10	same kind of change as the line above	CVE-2026-0415	same vendor as the line above	same change as the line above	Days to revision 1
2026-06-10	Product added	CVE-2026-3088	netgear	not named as affected at publication, now names rbe971	Days to revision 1
2026-06-10	Product added	Show all 4 CVE records in this change: Product added: red hat ai inference server 3.2 named as affected from red hatHide the 4 CVE records in this change: Product added: red hat ai inference server 3.2 named as affected from red hat	red hat	not named as affected at publication, now names red hat ai inference server 3.2	Days to revision 62 to 182
2026-06-10	same kind of change as the line above	CVE-2025-14087	same vendor as the line above	same change as the line above	Days to revision 182
2026-06-10	same kind of change as the line above	CVE-2025-14512	same vendor as the line above	same change as the line above	Days to revision 182
2026-06-10	same kind of change as the line above	CVE-2026-4775	same vendor as the line above	same change as the line above	Days to revision 78
2026-06-10	same kind of change as the line above	CVE-2026-4878	same vendor as the line above	same change as the line above	Days to revision 62
2026-06-10	Product added	CVE-2026-4878	red hat	not named as affected at publication, now names red hat openshift container platform 4.19	Days to revision 62
2026-06-10	Product added	CVE-2026-8863	suse linux certcc	not named as affected at publication, now names opensuse shim	Days to revision 1
2026-06-10	Product added	CVE-2026-0413Show all 2 products in this change: Product added: 2 products named as affected in CVE-2026-0413Hide the 2 products in this change: Product added: 2 products named as affected in CVE-2026-0413	netgear	not named as affected at publication, now names rbe370 and 1 more	Days to revision 1
2026-06-10	same kind of change as the line above	CVE-2026-0413	same vendor as the line above	not named as affected at publication, now names rbe370	Days to revision 1
2026-06-10	same kind of change as the line above	CVE-2026-0413	same vendor as the line above	not named as affected at publication, now names rbe770	Days to revision 1
2026-06-10	CVSS base score changed	CVE-2023-42456	whole record GitHub_M	stated at publication 3.1, now states 3.3CVSS v3.1 · base scoreLowLow	Days to revision 993
2026-06-10	Record state changed	CVE-2025-70420	whole record mitre	stated at publication PUBLISHED, now states REJECTED	Days to revision 51
2026-06-10	Record state changed	CVE-2026-7930	whole record Chrome	stated at publication PUBLISHED, now states REJECTED	Days to revision 35
2026-06-10	Record state changed	CVE-2026-4821	whole record GitHub_P	stated at publication PUBLISHED, now states REJECTED	Days to revision 49
Tue 9 Jun 2026· 88 record changes
2026-06-09	Fix version moved	Show all 53 CVE records in this change: Fix version moved: 10.0.19045.7291 → 10.0.19045.7417 from microsoftHide the 53 CVE records in this change: Fix version moved: 10.0.19045.7291 → 10.0.19045.7417 from microsoft	microsoftwindows 10 version 22h2	stated at publication 10.0.19045.7291, now states 10.0.19045.7417Release branch starts at 10.0.19045.0.bulk ×54	Days to revision 28
2026-06-09	same kind of change as the line above	CVE-2026-21530	same vendor as the line above	same change as the line aboveRelease branch starts at 10.0.19045.0.bulk ×54	Days to revision 28
2026-06-09	same kind of change as the line above	CVE-2026-33834	same vendor as the line above	same change as the line aboveRelease branch starts at 10.0.19045.0.bulk ×54	Days to revision 28
2026-06-09	same kind of change as the line above	CVE-2026-33839	same vendor as the line above	same change as the line aboveRelease branch starts at 10.0.19045.0.bulk ×54	Days to revision 28
2026-06-09	same kind of change as the line above	CVE-2026-33841	same vendor as the line above	same change as the line aboveRelease branch starts at 10.0.19045.0.bulk ×54	Days to revision 28
2026-06-09	same kind of change as the line above	CVE-2026-34329	same vendor as the line above	same change as the line aboveRelease branch starts at 10.0.19045.0.bulk ×54	Days to revision 28
2026-06-09	same kind of change as the line above	CVE-2026-34330	same vendor as the line above	same change as the line aboveRelease branch starts at 10.0.19045.0.bulk ×54	Days to revision 28
2026-06-09	same kind of change as the line above	CVE-2026-34331	same vendor as the line above	same change as the line aboveRelease branch starts at 10.0.19045.0.bulk ×54	Days to revision 28
2026-06-09	same kind of change as the line above	CVE-2026-34333	same vendor as the line above	same change as the line aboveRelease branch starts at 10.0.19045.0.bulk ×54	Days to revision 28
45 more rows in this change are not listed here. Open all 53 rows →
2026-06-09	Fix version moved	CVE-2026-32175	microsoftmicrosoft visual studio 2022 version 17.14	stated at publication 17.14.31, now states 17.14.32Release branch starts at 17.14.0.bulk ×54	Days to revision 28
2026-06-09	Affected range extended	CVE-2025-31514	fortinetfortios	stated at publication 7.2.12, now states 7.2.13Release branch starts at 7.2.0.	Days to revision 238
2026-06-09	Affected range extended	CVE-2025-31514	fortinetfortios	stated at publication 7.4.9, now states 7.4.11Release branch starts at 7.4.0.	Days to revision 238
2026-06-09	Affected range extended	CVE-2025-31514	fortinetfortiproxy	stated at publication 7.2.15, now states 7.2.16Release branch starts at 7.2.0.	Days to revision 238
2026-06-09	Affected range extended	CVE-2025-31514	fortinetfortios	stated at publication 7.0.17, now states 7.0.19Release branch starts at 7.0.0.Original value first replaced 2026-01-14; this value first seen 2026-06-09.	Days to revision 92
2026-06-09	Affected range extended	CVE-2025-31514	fortinetfortiproxy	stated at publication 7.4.11, now states 7.4.13Release branch starts at 7.4.0.Original value first replaced 2026-01-14; this value first seen 2026-06-09.	Days to revision 92
2026-06-09	Affected range extended	CVE-2025-31514	fortinetfortiproxy	stated at publication 7.0.21, now states 7.0.23Release branch starts at 7.0.0.Original value first replaced 2026-01-14; this value first seen 2026-06-09.	Days to revision 92
2026-06-092 commits	Product added	Show all 7 CVE records in this change: Product added: 11 products named as affected from microsoftHide the 7 CVE records in this change: Product added: 11 products named as affected from microsoft15 rows, one per record and product	microsoft	not named as affected at publication, now names microsoft excel for android and 10 moreBranches and original-value intervals are stated on each row.	Days to revision 28 to 609
2026-06-09	same kind of change as the line above	CVE-2026-41100	same vendor as the line above	not named as affected at publication, now names microsoft excel for android	Days to revision 28
2026-06-09	same kind of change as the line above	CVE-2026-41100	same vendor as the line above	not named as affected at publication, now names microsoft loop for android	Days to revision 28
2026-06-09	same kind of change as the line above	CVE-2026-41100	same vendor as the line above	not named as affected at publication, now names microsoft onenote for android	Days to revision 28
2026-06-09	same kind of change as the line above	CVE-2026-41100	same vendor as the line above	not named as affected at publication, now names microsoft powerpoint for android	Days to revision 28
2026-06-09	same kind of change as the line above	CVE-2026-41100	same vendor as the line above	not named as affected at publication, now names microsoft word for android	Days to revision 28
2026-06-09	same kind of change as the line above	CVE-2024-43582	same vendor as the line above	not named as affected at publication, now names windows 11 version 26h1	Days to revision 609
2026-06-09	same kind of change as the line above	CVE-2024-49075	same vendor as the line above	not named as affected at publication, now names windows 11 version 26h1	Days to revision 546
2026-06-09	same kind of change as the line above	CVE-2024-49123	same vendor as the line above	not named as affected at publication, now names windows 11 version 26h1	Days to revision 546
7 more rows in this change are not listed here. Open all 15 rows →
2026-06-09	Product added	CVE-2026-8863	oracle corporation certcc	not named as affected at publication, now names oraclelinux(7.2) shim	Days to revision 0
2026-06-09	Product added	CVE-2026-4366	red hat	not named as affected at publication, now names red hat build of keycloak 26.4	Days to revision 84
2026-06-09	Product added	CVE-2026-24858	fortinet	not named as affected at publication, now names fortinac-f	Days to revision 133
2026-06-09	Product added	CVE-2025-40936	siemens	not named as affected at publication, now names simcenter femap	Days to revision 204
2026-06-09	Product added	CVE-2025-66274	qnap systems inc. qnap	not named as affected at publication, now names qts	Days to revision 118
2026-06-09	CVSS base score changed	CVE-2026-11429	whole record Altium	stated at publication 9.4, now states 10.0CVSS v4.0 · base scoreCriticalCritical	Days to revision 4
2026-06-092 commits	CVSS base score changed	Show all 2 CVE records in this change: CVSS base score changed: 8.1 → 8.0Hide the 2 CVE records in this change: CVSS base score changed: 8.1 → 8.0	whole record GitHub_M	stated at publication 8.1, now states 8.0CVSS v3.1 · base scoreHighHighBranches and original-value intervals are stated on each row.	Days to revision 348
2026-06-09	same kind of change as the line above	CVE-2025-52903	same vendor as the line above	same change as the line above	Days to revision 348
2026-06-09	same kind of change as the line above	CVE-2025-52904	same vendor as the line above	same change as the line above	Days to revision 348
2026-06-09	CVSS base score changed	CVE-2026-10840	whole record redhat	stated at publication 9.6, now states 7.1CVSS v3.1 · base scoreCriticalHigh	Days to revision 5
2026-06-09	CVSS base score changed	CVE-2025-59381	whole record qnap	stated at publication 4.6, now states 6.9CVSS v4.0 · base scoreMediumMedium	Days to revision 158
2026-06-09	CVSS base score changed	CVE-2025-66274	whole record qnap	stated at publication 1.2, now states 5.1CVSS v4.0 · base scoreLowMedium	Days to revision 118
2026-06-09	CVSS base score changed	CVE-2026-22895	whole record qnap	stated at publication 2.2, now states 6.2CVSS v4.0 · base scoreLowMedium	Days to revision 81
2026-06-09	Record state changed	CVE-2026-26957	whole record GitHub_M	stated at publication PUBLISHED, now states REJECTED	Days to revision 110
Mon 8 Jun 2026· 5 record changes
2026-06-08	Fix version moved	CVE-2026-49777	shapedplugin, llcproduct slider pro for woocommerce Patchstack	stated at publication 3.5.3, now states 3.5.4Release branch starts at 0.	Days to revision 3
2026-06-08	Product added	CVE-2025-5372	red hat	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Days to revision 339
2026-06-08	Product added	Show all 2 CVE records in this change: Product added: red hat enterprise linux 8.6 advanced mission critical update support named as affected from red hatHide the 2 CVE records in this change: Product added: red hat enterprise linux 8.6 advanced mission critical update support named as affected from red hat	red hat	not named as affected at publication, now names red hat enterprise linux 8.6 advanced mission critical update support	Days to revision 60 to 70
2026-06-08	same kind of change as the line above	CVE-2026-4878	same vendor as the line above	same change as the line above	Days to revision 60
2026-06-08	same kind of change as the line above	CVE-2026-5119	same vendor as the line above	same change as the line above	Days to revision 70
2026-06-08	Record state changed	CVE-2026-50265	whole record redhat	stated at publication PUBLISHED, now states REJECTED	Days to revision 3
Sat 6 Jun 2026· 1 record change
2026-06-06	Product added	CVE-2025-7425	red hat	not named as affected at publication, now names openshift file integrity operator - fio 1	Days to revision 331
Fri 5 Jun 2026· 12 record changes
2026-06-05	Fix version moved	CVE-2026-32177	microsoftmicrosoft visual studio 2022 version 17.14	stated at publication 17.14.31, now states 17.14.32Release branch starts at 17.14.0.	Days to revision 24
2026-06-05	Affected range extended	CVE-2024-58135	srimojolicious CPANSec	stated at publication 9.39, now states 9.45Release branch starts at 7.28.Original value first replaced 2025-05-12; this value first seen 2026-06-05.	Days to revision 9
2026-06-05	Product added	CVE-2025-5914	red hat	not named as affected at publication, now names openshift file integrity operator - fio 1	Days to revision 360
2026-06-05	Product added	Show all 5 CVE records in this change: Product added: red hat enterprise linux 6 extended lifecycle support - extension named as affected from red hatHide the 5 CVE records in this change: Product added: red hat enterprise linux 6 extended lifecycle support - extension named as affected from red hat	red hat	not named as affected at publication, now names red hat enterprise linux 6 extended lifecycle support - extension	Days to revision 30 to 42
2026-06-05	same kind of change as the line above	CVE-2026-33999	same vendor as the line above	same change as the line above	Days to revision 42
2026-06-05	same kind of change as the line above	CVE-2026-34000	same vendor as the line above	same change as the line above	Days to revision 30
2026-06-05	same kind of change as the line above	CVE-2026-34001	same vendor as the line above	same change as the line above	Days to revision 42
2026-06-05	same kind of change as the line above	CVE-2026-34002	same vendor as the line above	same change as the line above	Days to revision 30
2026-06-05	same kind of change as the line above	CVE-2026-34003	same vendor as the line above	same change as the line above	Days to revision 42
2026-06-05	CVSS base score changed	CVE-2026-42250	whole record CERT-PL	stated at publication 5.1, now states 4.8CVSS v4.0 · base scoreMediumMedium	Days to revision 8
2026-06-05	Record state changed	Show all 3 CVE records in this change: Record state changed: PUBLISHED → REJECTEDHide the 3 CVE records in this change: Record state changed: PUBLISHED → REJECTED	whole record TR-CERT	stated at publication PUBLISHED, now states REJECTED	Days to revision 0
2026-06-05	same kind of change as the line above	CVE-2026-6207	same vendor as the line above	same change as the line above	Days to revision 0
2026-06-05	same kind of change as the line above	CVE-2026-6208	same vendor as the line above	same change as the line above	Days to revision 0
2026-06-05	same kind of change as the line above	CVE-2026-6209	same vendor as the line above	same change as the line above	Days to revision 0
Thu 4 Jun 2026· 4 record changes
2026-06-04	Product added	CVE-2026-22226	tp link systems inc. TPLink	not named as affected at publication, now names archer ax73 v2	Days to revision 122
2026-06-042 commits	Product added	Show all 2 CVE records in this change: Product added: red hat openshift container platform 4.13 named as affected from red hatHide the 2 CVE records in this change: Product added: red hat openshift container platform 4.13 named as affected from red hat	red hat	not named as affected at publication, now names red hat openshift container platform 4.13Branches and original-value intervals are stated on each row.	Days to revision 66 to 77
2026-06-04	same kind of change as the line above	CVE-2026-5121	same vendor as the line above	same change as the line above	Days to revision 66
2026-06-04	same kind of change as the line above	CVE-2026-4424	same vendor as the line above	same change as the line above	Days to revision 77
2026-06-04	CVSS base score changed	CVE-2025-71316	whole record cisa-cg	stated at publication 7.8, now states 9.8CVSS v3.1 · base scoreHighCritical	Days to revision 0
Wed 3 Jun 2026· 14 record changes
2026-06-03	Product added	Show all 2 CVE records in this change: Product added: openshift file integrity operator - fio 1 named as affected from red hatHide the 2 CVE records in this change: Product added: openshift file integrity operator - fio 1 named as affected from red hat	red hat	not named as affected at publication, now names openshift file integrity operator - fio 1	Days to revision 352
2026-06-03	same kind of change as the line above	CVE-2025-49794	same vendor as the line above	same change as the line above	Days to revision 352
2026-06-03	same kind of change as the line above	CVE-2025-49796	same vendor as the line above	same change as the line above	Days to revision 352
2026-06-03	Product added	CVE-2026-5119	red hat	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Days to revision 65
2026-06-03	CVSS base score changed	Show all 3 CVE records in this change: CVSS base score changed: 7.1 → 8.1Hide the 3 CVE records in this change: CVSS base score changed: 7.1 → 8.1	whole record autodesk	stated at publication 7.1, now states 8.1CVSS v3.1 · base scoreHighHigh	Days to revision 132
2026-06-03	same kind of change as the line above	CVE-2026-0533	same vendor as the line above	same change as the line above	Days to revision 132
2026-06-03	same kind of change as the line above	CVE-2026-0534	same vendor as the line above	same change as the line above	Days to revision 132
2026-06-03	same kind of change as the line above	CVE-2026-0535	same vendor as the line above	same change as the line above	Days to revision 132
2026-06-03	CVSS base score changed	Show all 4 CVE records in this change: CVSS base score changed: 7.8 → 8.4Hide the 4 CVE records in this change: CVSS base score changed: 7.8 → 8.4	whole record autodesk	stated at publication 7.8, now states 8.4CVSS v3.1 · base scoreHighHigh	Days to revision 119
2026-06-03	same kind of change as the line above	CVE-2026-0537	same vendor as the line above	same change as the line above	Days to revision 119
2026-06-03	same kind of change as the line above	CVE-2026-0538	same vendor as the line above	same change as the line above	Days to revision 119
2026-06-03	same kind of change as the line above	CVE-2026-0660	same vendor as the line above	same change as the line above	Days to revision 119
2026-06-03	same kind of change as the line above	CVE-2026-0661	same vendor as the line above	same change as the line above	Days to revision 119
2026-06-03	CVSS base score changed	Show all 2 CVE records in this change: CVSS base score changed: 5.3 → 5.5Hide the 2 CVE records in this change: CVSS base score changed: 5.3 → 5.5	whole record autodesk	stated at publication 5.3, now states 5.5CVSS v3.1 · base scoreMediumMedium	Days to revision 8
2026-06-03	same kind of change as the line above	CVE-2026-7450	same vendor as the line above	same change as the line above	Days to revision 8
2026-06-03	same kind of change as the line above	CVE-2026-7453	same vendor as the line above	same change as the line above	Days to revision 8
2026-06-03	CVSS base score changed	CVE-2026-4480	whole record redhat	stated at publication 8.5, now states 9.0CVSS v3.1 · base scoreHighCritical	Days to revision 8
2026-06-03	Record state changed	CVE-2026-9642	whole record tenable	stated at publication PUBLISHED, now states REJECTED	Days to revision 8
Tue 2 Jun 2026· 6 record changes
2026-06-02	Product added	Show all 4 CVE records in this change: Product added: red hat insights proxy 1.5 named as affected from red hatHide the 4 CVE records in this change: Product added: red hat insights proxy 1.5 named as affected from red hat	red hat	not named as affected at publication, now names red hat insights proxy 1.5	Days to revision 54 to 174
2026-06-02	same kind of change as the line above	CVE-2025-14087	same vendor as the line above	same change as the line above	Days to revision 174
2026-06-02	same kind of change as the line above	CVE-2025-14512	same vendor as the line above	same change as the line above	Days to revision 174
2026-06-02	same kind of change as the line above	CVE-2026-2100	same vendor as the line above	same change as the line above	Days to revision 68
2026-06-02	same kind of change as the line above	CVE-2026-4878	same vendor as the line above	same change as the line above	Days to revision 54
2026-06-02	Product added	CVE-2026-22029	remix-run GitHub_M	not named as affected at publication, now names @remix-run/router	Days to revision 144
2026-06-02	CVSS base score changed	CVE-2025-53345	whole record Patchstack	stated at publication 6.5, now states 8.8CVSS v3.1 · base scoreMediumHigh	Days to revision 0
Mon 1 Jun 2026· 5 record changes
2026-06-01	Product added	CVE-2026-4324	red hat	not named as affected at publication, now names red hat satellite 6.19 for rhel 9	Days to revision 76
2026-06-01	Product added	CVE-2025-11234	red hat	not named as affected at publication, now names red hat enterprise linux 9.0 update services for sap solutions	Days to revision 241
2026-06-01	Product added	Show all 2 CVE records in this change: Product added: fast datapath for red hat enterprise linux 10 named as affected from red hatHide the 2 CVE records in this change: Product added: fast datapath for red hat enterprise linux 10 named as affected from red hat	red hat	not named as affected at publication, now names fast datapath for red hat enterprise linux 10	Days to revision 38
2026-06-01	same kind of change as the line above	CVE-2026-5265	same vendor as the line above	same change as the line above	Days to revision 38
2026-06-01	same kind of change as the line above	CVE-2026-5367	same vendor as the line above	same change as the line above	Days to revision 38
2026-06-01	Record state changed	CVE-2025-61081	whole record mitre	stated at publication PUBLISHED, now states REJECTED	Days to revision 14
Fri 29 May 2026· 7 record changes
2026-05-29	Product added	Show all 2 CVE records in this change: Product added: blueplanet 125 nx3 m10 named as affected from siemensHide the 2 CVE records in this change: Product added: blueplanet 125 nx3 m10 named as affected from siemens	siemens	not named as affected at publication, now names blueplanet 125 nx3 m10	Days to revision 17
2026-05-29	same kind of change as the line above	CVE-2025-40946	same vendor as the line above	same change as the line above	Days to revision 17
2026-05-29	same kind of change as the line above	CVE-2026-41125	same vendor as the line above	same change as the line above	Days to revision 17
2026-05-29	CVSS base score changed	CVE-2026-0257	whole record palo_alto	stated at publication 4.7, now states 7.8CVSS v4.0 · base scoreMediumHigh	Days to revision 16
2026-05-29	CVSS base score changed	CVE-2026-9828	whole record NCSC.ch	stated at publication 1.2, now states 2.9CVSS v4.0 · base scoreLowLow	Days to revision 1
2026-05-29	Record state changed	Show all 3 CVE records in this change: Record state changed: PUBLISHED → REJECTEDHide the 3 CVE records in this change: Record state changed: PUBLISHED → REJECTED	whole record VulnCheck	stated at publication PUBLISHED, now states REJECTED	Days to revision 53
2026-05-29	same kind of change as the line above	CVE-2026-35020	same vendor as the line above	same change as the line above	Days to revision 53
2026-05-29	same kind of change as the line above	CVE-2026-35021	same vendor as the line above	same change as the line above	Days to revision 53
2026-05-29	same kind of change as the line above	CVE-2026-35022	same vendor as the line above	same change as the line above	Days to revision 53
Thu 28 May 2026· 18 record changes
2026-05-28	Product added	CVE-2025-5039	autodesk	not named as affected at publication, now names 3ds max	Days to revision 308
2026-05-285 commits	Product added	Show all 9 CVE records in this change: Product added: 4 products named as affected from red hatHide the 9 CVE records in this change: Product added: 4 products named as affected from red hat14 rows, one per record and product	red hat	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support and 3 moreBranches and original-value intervals are stated on each row.	Days to revision 2 to 70
2026-05-28	same kind of change as the line above	CVE-2026-34000	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Days to revision 23
2026-05-28	same kind of change as the line above	CVE-2026-34002	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Days to revision 23
2026-05-28	same kind of change as the line above	CVE-2026-33999	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Days to revision 35
2026-05-28	same kind of change as the line above	CVE-2026-34001	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Days to revision 35
2026-05-28	same kind of change as the line above	CVE-2026-34003	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Days to revision 35
2026-05-28	same kind of change as the line above	CVE-2026-34000	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.6 advanced mission critical update support	Days to revision 23
2026-05-28	same kind of change as the line above	CVE-2026-34002	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.6 advanced mission critical update support	Days to revision 23
2026-05-28	same kind of change as the line above	CVE-2026-33999	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.6 advanced mission critical update support	Days to revision 35
6 more rows in this change are not listed here. Open all 14 rows →
2026-05-28	Product added	CVE-2026-40034Show all 2 products in this change: Product added: 2 products named as affected in CVE-2026-40034Hide the 2 products in this change: Product added: 2 products named as affected in CVE-2026-40034	gitoxide VulnCheck	not named as affected at publication, now names gix and 1 more	Days to revision 2
2026-05-28	same kind of change as the line above	CVE-2026-40034	same vendor as the line above	not named as affected at publication, now names gix	Days to revision 2
2026-05-28	same kind of change as the line above	CVE-2026-40034	same vendor as the line above	not named as affected at publication, now names gix-submodule	Days to revision 2
2026-05-28	Record state changed	CVE-2026-9818	whole record OCD	stated at publication PUBLISHED, now states REJECTED	Days to revision 0
Wed 27 May 2026· 16 record changes
2026-05-27	Affected range extended	CVE-2026-5718	glenwpcoderdrag and drop multiple file upload for contact form 7 Wordfence	stated at publication 1.3.9.6, now states 1.3.9.7Release branch starts at 0.	Days to revision 39
2026-05-27	Product added	CVE-2026-9170	ibm	not named as affected at publication, now names http server	Days to revision 1
2026-05-27	Product added	Show all 4 CVE records in this change: Product added: red hat update infrastructure 5 named as affected from red hatHide the 4 CVE records in this change: Product added: red hat update infrastructure 5 named as affected from red hat	red hat	not named as affected at publication, now names red hat update infrastructure 5	Days to revision 48 to 168
2026-05-27	same kind of change as the line above	CVE-2025-14087	same vendor as the line above	same change as the line above	Days to revision 168
2026-05-27	same kind of change as the line above	CVE-2025-14512	same vendor as the line above	same change as the line above	Days to revision 167
2026-05-27	same kind of change as the line above	CVE-2026-2100	same vendor as the line above	same change as the line above	Days to revision 62
2026-05-27	same kind of change as the line above	CVE-2026-4878	same vendor as the line above	same change as the line above	Days to revision 48
2026-05-272 commits	Product added	CVE-2026-7374Show all 8 products in this change: Product added: 8 products named as affected in CVE-2026-7374Hide the 8 products in this change: Product added: 8 products named as affected in CVE-2026-7374	red hat	not named as affected at publication, now names red hat container native virtualization 4.21 and 7 moreBranches and original-value intervals are stated on each row.	Days to revision 1
2026-05-27	same kind of change as the line above	CVE-2026-7374	same vendor as the line above	not named as affected at publication, now names red hat container native virtualization 4.21	Days to revision 1
2026-05-27	same kind of change as the line above	CVE-2026-7374	same vendor as the line above	not named as affected at publication, now names red hat container native virtualization 4.12	Days to revision 1
2026-05-27	same kind of change as the line above	CVE-2026-7374	same vendor as the line above	not named as affected at publication, now names red hat container native virtualization 4.13	Days to revision 1
2026-05-27	same kind of change as the line above	CVE-2026-7374	same vendor as the line above	not named as affected at publication, now names red hat container native virtualization 4.14	Days to revision 1
2026-05-27	same kind of change as the line above	CVE-2026-7374	same vendor as the line above	not named as affected at publication, now names red hat container native virtualization 4.15	Days to revision 1
2026-05-27	same kind of change as the line above	CVE-2026-7374	same vendor as the line above	not named as affected at publication, now names red hat container native virtualization 4.16	Days to revision 1
2026-05-27	same kind of change as the line above	CVE-2026-7374	same vendor as the line above	not named as affected at publication, now names red hat container native virtualization 4.17	Days to revision 1
2026-05-27	same kind of change as the line above	CVE-2026-7374	same vendor as the line above	not named as affected at publication, now names red hat container native virtualization 4.18	Days to revision 1
2026-05-27	CVSS base score changed	CVE-2026-48999	whole record zte	stated at publication 5.3, now states 5.7CVSS v3.1 · base scoreMediumMedium	Days to revision 0
2026-05-27	CVSS base score changed	CVE-2026-49000	whole record zte	stated at publication 5.3, now states 7.0CVSS v3.1 · base scoreMediumHigh	Days to revision 0
Tue 26 May 2026· 7 record changes
2026-05-26	Affected range extended	CVE-2025-68648	fortinetfortianalyzer cloud	stated at publication 7.0.15, now states 7.0.16Release branch starts at 7.0.1.	Days to revision 77
2026-05-26	Product added	CVE-2025-23260	nvidia	not named as affected at publication, now names ais operator	Days to revision 336
2026-05-262 commits	Product added	CVE-2026-4887Show all 2 products in this change: Product added: 2 products named as affected in CVE-2026-4887Hide the 2 products in this change: Product added: 2 products named as affected in CVE-2026-4887	red hat	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support and 1 moreBranches and original-value intervals are stated on each row.	Days to revision 61
2026-05-26	same kind of change as the line above	CVE-2026-4887	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Days to revision 61
2026-05-26	same kind of change as the line above	CVE-2026-4887	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.6 advanced mission critical update support	Days to revision 61
2026-05-26	CVSS base score changed	CVE-2026-41947	whole record VulnCheck	stated at publication 9.1, now states 9.3CVSS v4.0 · base scoreCriticalCritical	Days to revision 8
2026-05-26	CVSS base score changed	CVE-2026-48132	whole record checkpoint	stated at publication 7.4, now states 8.1CVSS v3.1 · base scoreHighHigh	Days to revision 0
2026-05-26	CVSS base score changed	CVE-2026-48134	whole record checkpoint	stated at publication 7.6, now states 5.6CVSS v3.1 · base scoreHighMedium	Days to revision 0
Thu 21 May 2026· 4 record changes
2026-05-21	Fix version moved	CVE-2026-48172	litespeed technologiescpanel plugin mitre	stated at publication 2.4.5, now states 2.4.7Release branch starts at 2.3.same day	Days to revision 1
2026-05-21	Product added	CVE-2026-48172	litespeed technologies mitre	not named as affected at publication, now names whm plugin	Days to revision 1
2026-05-21	Product added	CVE-2025-67972	zoho mail Patchstack	not named as affected at publication, now names zoho zeptomail	Days to revision 90
2026-05-21	Product added	CVE-2023-52355	red hat	not named as affected at publication, now names red hat enterprise linux 10	Days to revision 846
Wed 20 May 2026· 14 record changes
2026-05-20	Product added	CVE-2024-49767	pallets GitHub_M	not named as affected at publication, now names quart	Days to revision 572
2026-05-203 commits	Product added	Show all 8 CVE records in this change: Product added: 4 products named as affected from red hatHide the 8 CVE records in this change: Product added: 4 products named as affected from red hat13 rows, one per record and product	red hat	not named as affected at publication, now names red hat openshift container platform 4.17 and 3 moreBranches and original-value intervals are stated on each row.	Days to revision 50 to 183
2026-05-20	same kind of change as the line above	CVE-2025-61662	same vendor as the line above	not named as affected at publication, now names red hat openshift container platform 4.17	Days to revision 183
2026-05-20	same kind of change as the line above	CVE-2026-4111	same vendor as the line above	not named as affected at publication, now names red hat openshift container platform 4.17	Days to revision 68
2026-05-20	same kind of change as the line above	CVE-2026-4424	same vendor as the line above	not named as affected at publication, now names red hat ai inference server 3.2	Days to revision 62
2026-05-20	same kind of change as the line above	CVE-2026-4424	same vendor as the line above	not named as affected at publication, now names red hat openshift container platform 4.17	Days to revision 62
2026-05-20	same kind of change as the line above	CVE-2026-4775	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Days to revision 57
2026-05-20	same kind of change as the line above	CVE-2026-5121	same vendor as the line above	not named as affected at publication, now names red hat ai inference server 3.2	Days to revision 51
2026-05-20	same kind of change as the line above	CVE-2026-5121	same vendor as the line above	not named as affected at publication, now names red hat openshift container platform 4.17	Days to revision 51
2026-05-20	same kind of change as the line above	CVE-2026-5201	same vendor as the line above	not named as affected at publication, now names red hat ai inference server 3.2	Days to revision 50
5 more rows in this change are not listed here. Open all 13 rows →
Mon 18 May 2026· 2 record changes
2026-05-18	Product added	CVE-2026-8149	legion of the bouncy castle inc. bcorg	not named as affected at publication, now names bc-lts	Days to revision 11
2026-05-18	Record state changed	CVE-2026-4663	whole record Wordfence	stated at publication PUBLISHED, now states REJECTED	Days to revision 6
Fri 15 May 2026· 1 record change
2026-05-15	Product added	CVE-2026-40379	microsoft	not named as affected at publication, now names microsoft entra	Days to revision 3
Thu 14 May 2026· 6 record changes
2026-05-14	Product added	CVE-2026-35433Show all 5 products in this change: Product added: 5 products named as affected in CVE-2026-35433Hide the 5 products in this change: Product added: 5 products named as affected in CVE-2026-35433	microsoft	not named as affected at publication, now names microsoft .net framework 3.5 and 4 more	Days to revision 2
2026-05-14	same kind of change as the line above	CVE-2026-35433	same vendor as the line above	not named as affected at publication, now names microsoft .net framework 3.5	Days to revision 2
2026-05-14	same kind of change as the line above	CVE-2026-35433	same vendor as the line above	not named as affected at publication, now names microsoft .net framework 3.5 and 4.7.2	Days to revision 2
2026-05-14	same kind of change as the line above	CVE-2026-35433	same vendor as the line above	not named as affected at publication, now names microsoft .net framework 3.5 and 4.8	Days to revision 2
2026-05-14	same kind of change as the line above	CVE-2026-35433	same vendor as the line above	not named as affected at publication, now names microsoft .net framework 3.5 and 4.8.1	Days to revision 2
2026-05-14	same kind of change as the line above	CVE-2026-35433	same vendor as the line above	not named as affected at publication, now names microsoft .net framework 4.8	Days to revision 2
2026-05-14	CVSS base score changed	CVE-2026-20188	whole record cisco	stated at publication 7.5, now states 0.0CVSS v3.1 · base scoreHighNone	Days to revision 8
Wed 13 May 2026· 36 record changes
2026-05-13	Fix version moved	Show all 2 CVE records in this change: Fix version moved: 9.1.44.15 → 9.1.45.11 from microsoftHide the 2 CVE records in this change: Fix version moved: 9.1.44.15 → 9.1.45.11 from microsoft	microsoftmicrosoft dynamics 365 (on-premises) version 9.1	stated at publication 9.1.44.15, now states 9.1.45.11Release branch starts at 9.0.same day	Days to revision 1
2026-05-13	same kind of change as the line above	CVE-2026-42898	same vendor as the line above	same change as the line aboveRelease branch starts at 9.0.same day	Days to revision 1
2026-05-13	same kind of change as the line above	CVE-2026-42833	same vendor as the line above	same change as the line aboveRelease branch starts at 9.0.same day	Days to revision 1
2026-05-13	Product added	Show all 21 CVE records in this change: Product added: safari named as affected from appleHide the 21 CVE records in this change: Product added: safari named as affected from apple	apple	not named as affected at publication, now names safari	Days to revision 2
2026-05-13	same kind of change as the line above	CVE-2026-28847	same vendor as the line above	same change as the line above	Days to revision 2
2026-05-13	same kind of change as the line above	CVE-2026-28883	same vendor as the line above	same change as the line above	Days to revision 2
2026-05-13	same kind of change as the line above	CVE-2026-28901	same vendor as the line above	same change as the line above	Days to revision 2
2026-05-13	same kind of change as the line above	CVE-2026-28902	same vendor as the line above	same change as the line above	Days to revision 2
2026-05-13	same kind of change as the line above	CVE-2026-28903	same vendor as the line above	same change as the line above	Days to revision 2
2026-05-13	same kind of change as the line above	CVE-2026-28904	same vendor as the line above	same change as the line above	Days to revision 2
2026-05-13	same kind of change as the line above	CVE-2026-28905	same vendor as the line above	same change as the line above	Days to revision 2
2026-05-13	same kind of change as the line above	CVE-2026-28907	same vendor as the line above	same change as the line above	Days to revision 2
13 more rows in this change are not listed here. Open all 21 rows →
2026-05-132 commits	Product added	Show all 4 CVE records in this change: Product added: 2 products named as affected from red hatHide the 4 CVE records in this change: Product added: 2 products named as affected from red hat8 rows, one per record and product	red hat	not named as affected at publication, now names red hat openshift container platform 4.15 and 1 moreBranches and original-value intervals are stated on each row.	Days to revision 44 to 176
2026-05-13	same kind of change as the line above	CVE-2025-61662	same vendor as the line above	not named as affected at publication, now names red hat openshift container platform 4.15	Days to revision 176
2026-05-13	same kind of change as the line above	CVE-2026-4111	same vendor as the line above	not named as affected at publication, now names red hat openshift container platform 4.15	Days to revision 61
2026-05-13	same kind of change as the line above	CVE-2026-4424	same vendor as the line above	not named as affected at publication, now names red hat openshift container platform 4.15	Days to revision 55
2026-05-13	same kind of change as the line above	CVE-2026-5121	same vendor as the line above	not named as affected at publication, now names red hat openshift container platform 4.15	Days to revision 44
2026-05-13	same kind of change as the line above	CVE-2025-61662	same vendor as the line above	not named as affected at publication, now names red hat openshift container platform 4.14	Days to revision 176
2026-05-13	same kind of change as the line above	CVE-2026-4111	same vendor as the line above	not named as affected at publication, now names red hat openshift container platform 4.14	Days to revision 61
2026-05-13	same kind of change as the line above	CVE-2026-4424	same vendor as the line above	not named as affected at publication, now names red hat openshift container platform 4.14	Days to revision 55
2026-05-13	same kind of change as the line above	CVE-2026-5121	same vendor as the line above	not named as affected at publication, now names red hat openshift container platform 4.14	Days to revision 44
2026-05-13	CVSS base score changed	Show all 2 CVE records in this change: CVSS base score changed: 5.5 → 7.8Hide the 2 CVE records in this change: CVSS base score changed: 5.5 → 7.8	whole record adobe	stated at publication 5.5, now states 7.8CVSS v3.1 · base scoreMediumHigh	Days to revision 1
2026-05-13	same kind of change as the line above	CVE-2026-34683	same vendor as the line above	same change as the line above	Days to revision 1
2026-05-13	same kind of change as the line above	CVE-2026-34684	same vendor as the line above	same change as the line above	Days to revision 1
2026-05-13	CVSS base score changed	CVE-2026-44113	whole record VulnCheck	stated at publication 6.0, now states 8.3CVSS v4.0 · base scoreMediumHigh	Days to revision 7
2026-05-13	CVSS base score changed	CVE-2025-15101	whole record ASUS	stated at publication 8.5, now states 8.6CVSS v4.0 · base scoreHighHigh	Days to revision 48
2026-05-13	Record state changed	CVE-2026-8449	whole record VulnCheck	stated at publication PUBLISHED, now states REJECTED	Days to revision 1
Tue 12 May 2026· 5 record changes
2026-05-12	Affected range extended	CVE-2025-65084Show all 5 products in this change: Affected range extended: 12.6.1204.207 → 12.6.1204.216 in CVE-2025-65084Hide the 5 products in this change: Affected range extended: 12.6.1204.207 → 12.6.1204.216 in CVE-2025-65084	ashlar-vellum5 products icscert	stated at publication 12.6.1204.207, now states 12.6.1204.216Release branch starts at 0.	Days to revision 168
2026-05-12	same kind of change as the line above	CVE-2025-65084	same vendor as the line above	same change as the line aboveRelease branch starts at 0.	Days to revision 168
2026-05-12	same kind of change as the line above	CVE-2025-65084	same vendor as the line above	same change as the line aboveRelease branch starts at 0.	Days to revision 168
2026-05-12	same kind of change as the line above	CVE-2025-65084	same vendor as the line above	same change as the line aboveRelease branch starts at 0.	Days to revision 168
2026-05-12	same kind of change as the line above	CVE-2025-65084	same vendor as the line above	same change as the line aboveRelease branch starts at 0.	Days to revision 168
2026-05-12	same kind of change as the line above	CVE-2025-65084	same vendor as the line above	same change as the line aboveRelease branch starts at 0.	Days to revision 168

Rows, not records: a moved fix version or an extended range counts once per record, product and release branch; an added product once per record and product; every other kind once per record or advisory. Days to revision is how long the value first stated stood: from the record's or advisory's publication, or from the day a KEV field value was first seen, to the first commit that replaced it. An addition to KEV has no earlier value and shows none. A collapsed line is one publisher's run of identical changes on one day; it says how many, and opens to all of them.

Data sources and quality

Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.

A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.

The units, the refusals, the cut-offs and every source, in full →

Check my CVEs against these changes →