CVE Lookup
CVE statistics & trends
A live snapshot of the global vulnerability catalog: how many CVEs exist, how many have a fix, how they break down by severity and year, and the weaknesses behind them.
385,044
CVEs in the catalog
136,482
with an available fix (35.4%)
1,688
actively exploited (CISA KEV)
By severity
Critical
35,712
High
144,583
Medium
166,598
Low
15,903
Unscored
22,248
New CVEs published per year
2015
8,779
2016
10,647
2017
17,105
2018
17,817
2019
17,623
2020
21,074
2021
23,461
2022
27,540
2023
31,400
2024
39,230
2025
45,207
2026
51,481
Most common weakness types
CWE-79Cross-Site Scripting (XSS)
46,528CWE-89SQL Injection
20,456CWE-787Out-of-bounds Write
14,659CWE-119Buffer Overflow
14,200CWE-20Improper Input Validation
13,093CWE-200Information Exposure
10,821CWE-22Path Traversal
9,997CWE-352Cross-Site Request Forgery
9,609CWE-862Missing Authorization
9,415CWE-125Out-of-bounds Read
9,413CWE-416Use After Free
8,290CWE-284Improper Access Control
7,309
Statistics are one thing. Your fleet is another.
TridentStack Control shows which known vulnerabilities affect your Windows, macOS, and Linux endpoints, prioritizes them by severity and active exploitation, and patches them automatically.