Skip to content

CVE publication trends

Public vulnerability volume across all products. Counts describe publication activity; your stack determines applicability.

CVEs ever published
419,272
Critical CVEs ever published
51,678
Known exploited CVEs
1,767

Critical CVEs published in the last 30 days

3.044% of all critical CVEs ever published came out in the last 30 days.

1,573 ÷ 51,678 critical CVEs, by original publication time (UTC).

New CVEs per month

Total · Critical (CVSS ≥ 9) · KEV. Critical and KEV can overlap; each is a subset of the total.

Gray bars show all CVEs, lime bars critical CVEs and amber bars known exploited CVEs. Exact counts are in the table below.08,74117,4811999200420092014201920242026
Exact monthly counts (335 months)
NVD monthly CVE publication counts in UTC
Month (UTC)TotalCriticalKEV
2026-111,6761261
2026-1017,4811,58521
2026-0915,0741,52332
2026-0812,7191,82120
2026-079,9191,35823
2026-068,00196726
2026-056,98569323
2026-045,88556814
2026-036,30466310
2026-024,80844320
2026-015,14344516
2025-125,64340523
2025-113,11626311
2025-104,38932110
2025-094,53728916
2025-083,73743512
2025-073,93339414
2025-063,79929418
2025-054,26439119
2025-044,14236216
2025-034,16641926
2025-023,83126715
2025-014,41533717
2024-123,44831111
2024-114,08637616
2024-103,59537017
2024-092,54025713
2024-082,94532921
2024-073,17428312
2024-063,17332813
2024-055,10340913
2024-043,73535510
2024-033,3523888
2024-022,90638611
2024-012,64750715
2023-122,6864619
2023-112,50835411
2023-102,72242319
2023-092,82836022
2023-082,51843514
2023-072,36333015
2023-062,40531417
2023-052,7343408
2023-042,36335618
2023-032,78340215
2023-022,47434010
2023-012,5655108
2022-122,9003657
2022-111,98930614
2022-101,9093368
2022-092,32333712
2022-082,4094668
2022-072,1563428
2022-062,3313993
2022-052,0353989
2022-042,06332616
2022-032,09240816
2022-022,01733118
2022-012,20723012
2021-122,40534215
2021-111,64421611
2021-101,71720718
2021-091,92021930
2021-082,24625722
2021-071,61319416
2021-061,93718415
2021-051,50818519
2021-041,93025018
2021-031,58619222
2021-021,49322919
2021-011,95119110
2020-121,5642859
2020-111,49218410
2020-101,57420414
2020-091,6371988
2020-081,23913510
2020-071,45323116
2020-061,85622110
2020-051,05813910
2020-042,20930116
2020-031,78732820
2020-021,48123116
2020-011,8722517
2019-121,86625620
2019-111,7792069
2019-101,7372447
2019-091,54118811
2019-082,0503286
2019-071,64627914
2019-061,2651918
2019-051,32426414
2019-041,57421616
2019-031,63018712
2019-028821416
2019-011,6441356
2018-121,20218210
2018-119891406
2018-101,4741862
2018-091,1921703
2018-081,0421688
2018-072,2182725
2018-061,8043003
2018-051,1911577
2018-041,6833873
2018-032,30420722
2018-021,3412583
2018-011,7141704
2017-121,1182282
2017-111,0771542
2017-101,4331868
2017-091,23224713
2017-081,5642466
2017-071,31216713
2017-061,0431344
2017-054,15515210
2017-041,5921739
2017-031,37113817
2017-021,0751202
2017-011,1411663
2016-12527604
2016-11388348
2016-106891413
2016-09597762
2016-08412696
2016-07716830
2016-06513596
2016-056171547
2016-04661808
2016-03333333
2016-02394425
2016-01670642
2015-125671874
2015-11368752
2015-107311402
2015-09499772
2015-086251375
2015-0764212810
2015-06498513
2015-05417994
2015-04558617
2015-03457590
2015-02496854
2015-01737474
2014-12618621
2014-11505564
2014-101,418586
2014-091,156794
2014-08407553
2014-07656782
2014-06448991
2014-05555423
2014-04683653
2014-03549672
2014-02434704
2014-01579631
2013-12495601
2013-11399525
2013-10634742
2013-09475912
2013-08378521
2013-07483702
2013-06369753
2013-053581095
2013-04442672
2013-03438412
2013-024101044
2013-014431016
2012-12270422
2012-11445740
2012-10559903
2012-09655762
2012-087411083
2012-075361071
2012-06413644
2012-05434892
2012-04228592
2012-034051270
2012-02349752
2012-01316391
2011-12347772
2011-11312711
2011-10484602
2011-09389660
2011-08295850
2011-07308520
2011-062941052
2011-05296740
2011-04312471
2011-03356261
2011-023821410
2011-01397740
2010-12361934
2010-11280693
2010-104351251
2010-09301501
2010-083831573
2010-07344561
2010-064931441
2010-05424550
2010-04504763
2010-03515761
2010-02308562
2010-01319623
2009-12445911
2009-11311661
2009-10353921
2009-095761020
2009-08531801
2009-07449742
2009-064521013
2009-05367801
2009-04570891
2009-03566912
2009-02689751
2009-01469720
2008-125301290
2008-11450971
2008-105261091
2008-09454861
2008-08368621
2008-07519640
2008-06436810
2008-05385520
2008-04457880
2008-03508800
2008-02530792
2008-01501780
2007-12448710
2007-11429700
2007-10560890
2007-09439541
2007-08526570
2007-07578730
2007-06571960
2007-055701100
2007-046281130
2007-037131280
2007-02536791
2007-01598540
2006-12781900
2006-11510310
2006-10549670
2006-09555230
2006-08542240
2006-07530390
2006-06632230
2006-05601141
2006-04578420
2006-03548231
2006-02448150
2006-01385430
2005-121,034380
2005-11511460
2005-10293110
2005-0931381
2005-08327140
2005-07293150
2005-0625050
2005-051,270420
2005-0412770
2005-03164120
2005-02105130
2005-013231110
2004-121,243801
2004-11173510
2004-1010130
2004-099030
2004-08244501
2004-0710280
2004-065220
2004-0568100
2004-0410700
2004-03143160
2004-029120
2004-016540
2003-12515360
2003-1198110
2003-1092120
2003-093560
2003-08208200
2003-074820
2003-06129120
2003-058090
2003-04135120
2003-03122140
2003-024920
2003-013720
2002-12879740
2002-117530
2002-1031490
2002-096830
2002-08256350
2002-07137210
2002-0610231
2002-0515090
2002-044510
2002-0310430
2002-021530
2002-012520
2001-12259220
2001-116100
2001-1014260
2001-0913540
2001-08206210
2001-07191180
2001-06211140
2001-05105230
2001-041700
2001-03105180
2001-02117260
2001-0113050
2000-12212420
2000-1173110
2000-10136220
2000-09300
2000-08300
2000-077470
2000-06119170
2000-05110140
2000-047970
2000-035750
2000-028660
2000-0168140
1999-12201210
1999-1183100
1999-105790
1999-096090
1999-086090
1999-074060
1999-063760
1999-055460
1999-043930
1999-035220
1999-025860
1999-01182770

Critical means the best available CVSS base score is at least 9, preferring 4.0 → 3.1 → 3.0 → 2.0. Unscored records count toward volume. KEV combines NVD flags with our existing CISA KEV data; a CVE can be both critical and KEV. The current month is month to date. Totals include rejected records and 684 CVEs published before 1999; the chart begins in 1999.

Source: NVD (NIST), computed by Patch Next, updated . Window as of .