CVE Lookup
CVE statistics & trends
A live snapshot of the global vulnerability catalog: how many CVEs exist, how many have a fix, how they break down by severity and year, and the weaknesses behind them.
417,636
CVEs in the catalog
149,596
with an available fix (35.8%)
1,767
actively exploited (CISA KEV)
By severity
Critical
38,925
High
157,797
Medium
179,726
Low
17,699
Unscored
23,489
New CVEs published per year
2015
8,786
2016
10,656
2017
17,113
2018
17,819
2019
17,628
2020
21,086
2021
23,481
2022
27,565
2023
31,476
2024
39,363
2025
45,448
2026
83,499
Most common weakness types
CWE-79Cross-Site Scripting (XSS)
49,060CWE-89SQL Injection
21,510CWE-787Out-of-bounds Write
15,351CWE-119Buffer Overflow
14,669CWE-20Improper Input Validation
13,692CWE-200Information Exposure
11,760CWE-862Missing Authorization
11,358CWE-22Path Traversal
10,912CWE-125Out-of-bounds Read
10,514CWE-352Cross-Site Request Forgery
9,890CWE-416Use After Free
9,614CWE-284Improper Access Control
8,760
Statistics are one thing. Your fleet is another.
TridentStack Control shows which known vulnerabilities affect your Windows, macOS, and Linux endpoints, prioritizes them by severity and active exploitation, and patches them automatically.