Report

What is in the SecLookup database. CVEs published through 2026-10-31, data last updated 2026-10-31 01:30:19 UTC.

CVEs tracked398,62816,560 in the last 30 days
High or critical50.0%199,258 CVEs
Known exploited1,7660.44% of all CVEs
Used in ransomware36120.4% of known exploited
Median time to KEV listing8 daysCVEs published since KEV launched, Nov 2021

From published to exploited

Each stage is a subset of the one above. Bar widths are to scale, so the last two stages are slivers.

View data
StageCountOf previous
All CVEs398,628
Have a CVSS score393,96898.8%
Rated high or critical199,25850.6%
…and known exploited1,5640.78%
…and used in ransomware32921.0%

Inside the known exploited catalogue

The bottom of the funnel, zoomed in, starting from every CISA KEV entry.

View data
StageCountOf previous
Known exploited1,766
…and rated high or critical1,56488.6%
…and used in ransomware32921.0%

CVEs by severity

Uses the newest CVSS version recorded for each CVE, so older ratings often come from CVSS 2.0.

View data
SeverityCount
Critical41,238
High158,020
Medium176,637
Low17,997
None or unscored4,736

CVEs published per year, by severity

The latest year is partial, up to 2026-10-31.

View data
YearCriticalHighMediumLowNone or unscored
198802000
198902100
199008210
1991011400
1992012010
199308320
19940141010
1995117610
19961432190
1997114389190
1998113785230
199934233571110
20002454467960
2001127767061820
2002101,0239801430
20039674747970
2004109731,2652030
2005132,0482,4304410
2006122,7633,3245090
2007213,1623,1012320
2008192,8462,5821850
2009152,7342,7861970
2010282,0932,2412770
201151,7842,1012600
2012211,7243,0355080
2013231,7342,9155150
2014201,9245,3256590
2015512,3523,5025890
20168872,8952,4462210
20172,1116,5975,6982360
20182,5977,5426,2031680
20192,6357,2097,1503110
20202,7087,6767,5134250
20212,6668,5558,4874410
20224,24410,15010,1834942
20234,62510,94712,8164271
20244,29914,10520,6858559
20254,17715,89524,0693,103907
202610,01136,56533,3026,0553,817

CVEs published per month

The last 36 months. The latest month is partial.

View data
MonthCount
2023-112,449
2023-122,650
2024-012,594
2024-022,778
2024-033,309
2024-043,621
2024-054,999
2024-063,078
2024-073,113
2024-082,896
2024-092,514
2024-103,564
2024-114,056
2024-123,431
2025-014,275
2025-023,673
2025-033,998
2025-044,034
2025-053,980
2025-063,681
2025-073,776
2025-083,628
2025-094,321
2025-104,273
2025-113,021
2025-125,491
2026-014,302
2026-024,616
2026-036,234
2026-045,810
2026-056,936
2026-067,942
2026-079,770
2026-0812,256
2026-0914,933
2026-1016,951

CVSS score distribution

Scored CVEs by base score. Each band includes its lower bound, and the top band includes 10.

View data
ScoreCount
0–1159
1–21,927
2–39,753
3–46,234
4–538,042
5–676,849
6–761,746
7–899,793
8–947,968
9–1051,497

Top weaknesses in CVEs

The CWEs mapped to the most CVEs. A CVE can map to several.

View data
WeaknessCount
CWE-79 Improper Neutralization of Input During Web Page Generation49,021
CWE-89 Improper Neutralization of Special Elements used in an SQL Command21,506
CWE-787 Out-of-bounds Write15,356
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer14,661
CWE-20 Improper Input Validation13,687
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor11,756
CWE-862 Missing Authorization11,349
CWE-22 Improper Limitation of a Pathname to a Restricted Directory10,907
CWE-125 Out-of-bounds Read10,512
CWE-352 Cross-Site Request Forgery9,886

Top ATT&CK techniques

Techniques linked to the most threat groups, software and campaigns.

View data
TechniqueCount
T1105 Ingress Tool Transfer531
T1082 System Information Discovery437
T1071.001 Web Protocols431
T1059.003 Windows Command Shell389
T1083 File and Directory Discovery381
T1140 Deobfuscate/Decode Files or Information358
T1057 Process Discovery326
T1070.004 File Deletion319
T1016 System Network Configuration Discovery292
T1547.001 Registry Run Keys / Startup Folder267

Vendors with the most known exploited CVEs

Top 10 vendors, split by known ransomware use.

View data
VendorUsed in ransomwareOther exploited
Microsoft117273
Cisco795
Apple095
Adobe1172
Google076
Oracle1333
Apache833
Ivanti1226
Fortinet1418
Linux230

Added to the KEV catalogue per year

The catalogue launched in November 2021 and its early additions include older CVEs. The latest year is partial.

View data
YearCount
2021311
2022555
2023187
2024186
2025245
2026282

Reference data beyond CVEs

Entries per knowledge base. CISA KEV is not listed because it annotates CVEs.

View data
SourceCount
MITRE ATT&CK2,297
Compliance1,122
CWE1,014
CAPEC559
OWASP532