CVE Lookup
CVE statistics & trends
A live snapshot of the global vulnerability catalog: how many CVEs exist, how many have a fix, how they break down by severity and year, and the weaknesses behind them.
395,817
CVEs in the catalog
141,683
with an available fix (35.8%)
1,717
actively exploited (CISA KEV)
By severity
Critical
36,875
High
149,336
Medium
170,529
Low
16,413
Unscored
22,664
New CVEs published per year
2015
8,779
2016
10,647
2017
17,106
2018
17,817
2019
17,624
2020
21,076
2021
23,470
2022
27,556
2023
31,445
2024
39,252
2025
45,300
2026
62,049
Most common weakness types
CWE-79Cross-Site Scripting (XSS)
47,269CWE-89SQL Injection
20,783CWE-787Out-of-bounds Write
14,868CWE-119Buffer Overflow
14,300CWE-20Improper Input Validation
13,258CWE-200Information Exposure
11,076CWE-22Path Traversal
10,270CWE-862Missing Authorization
9,956CWE-125Out-of-bounds Read
9,747CWE-352Cross-Site Request Forgery
9,710CWE-416Use After Free
8,687CWE-284Improper Access Control
7,937
Statistics are one thing. Your fleet is another.
TridentStack Control shows which known vulnerabilities affect your Windows, macOS, and Linux endpoints, prioritizes them by severity and active exploitation, and patches them automatically.