CVEs reported by year

CVE records per calendar year, 2014 to 2026. 2026 is still running: it has 9 months on the board, not twelve, and is already 62% past all of 2025.

CVEs reported by year, 2014 to 2026 Line chart; the numbers are in the text around it. 0 20,000 40,000 60,000 80,000 7,928 2014 6,494 2015 6,449 2016 14,642 2017 16,510 2018 17,305 2019 18,322 2020 20,149 2021 25,073 2022 28,816 2023 39,953 2024 48,152 2025 77,847 so far 2026

2026 counts records published through 2026-10-13; every other year is complete. Published records, not vulnerabilities found or exploited that year.
Source: CVE.ICU, built from NVD and the CVE List V5 repository. Data as of 2026-10-13.
Chart generated by AI on 2026-10-13. Likely not checked by a human, so it may have errors.

Download the chart with its labels as SVG or PNG, or the numbers as JSON or CSV.

🍕 Get more pizza.