CVE Lookup
CVE statistics & trends
A live snapshot of the global vulnerability catalog: how many CVEs exist, how many have a fix, how they break down by severity and year, and the weaknesses behind them.
362,516
CVEs in the catalog
127,230
with an available fix (35.1%)
1,630
actively exploited (CISA KEV)
By severity
Critical
32,344
High
133,511
Medium
159,996
Low
14,979
Unscored
21,686
New CVEs published per year
2015
8,779
2016
10,645
2017
17,102
2018
17,817
2019
17,618
2020
21,060
2021
23,430
2022
27,519
2023
31,214
2024
39,154
2025
44,868
2026
29,631
Most common weakness types
CWE-79Cross-Site Scripting (XSS)
45,030CWE-89SQL Injection
19,624CWE-787Out-of-bounds Write
14,222CWE-119Buffer Overflow
13,997CWE-20Improper Input Validation
12,572CWE-200Information Exposure
10,160CWE-352Cross-Site Request Forgery
9,357CWE-22Path Traversal
9,260CWE-125Out-of-bounds Read
8,901CWE-862Missing Authorization
8,359CWE-416Use After Free
7,645CWE-94Code Injection
6,537