CVE Lookup
CVE statistics & trends
A live snapshot of the global vulnerability catalog: how many CVEs exist, how many have a fix, how they break down by severity and year, and the weaknesses behind them.
378,758
CVEs in the catalog
134,455
with an available fix (35.5%)
1,666
actively exploited (CISA KEV)
By severity
Critical
34,872
High
142,085
Medium
164,407
Low
15,598
Unscored
21,796
New CVEs published per year
2015
8,779
2016
10,647
2017
17,104
2018
17,817
2019
17,620
2020
21,069
2021
23,445
2022
27,528
2023
31,246
2024
39,223
2025
45,150
2026
45,450
Most common weakness types
CWE-79Cross-Site Scripting (XSS)
46,137CWE-89SQL Injection
20,253CWE-787Out-of-bounds Write
14,515CWE-119Buffer Overflow
14,132CWE-20Improper Input Validation
12,957CWE-200Information Exposure
10,653CWE-22Path Traversal
9,805CWE-352Cross-Site Request Forgery
9,556CWE-125Out-of-bounds Read
9,317CWE-862Missing Authorization
9,145CWE-416Use After Free
8,187CWE-94Code Injection
6,838
Statistics are one thing. Your fleet is another.
TridentStack Control shows which known vulnerabilities affect your Windows, macOS, and Linux endpoints, prioritizes them by severity and active exploitation, and patches them automatically.