CVEs by year
Every CVE on CVERadar grouped by the year in its identifier. Old identifiers stay on the radar while attackers keep using them, which is why decade-old CVEs still appear in the CISA KEV catalog. Across all years the radar holds 1724 CVEs; CVE ids from 2020 and earlier share one page.
CVE-2026
579 CVEs: 185 in CISA KEV, 257 critical. Highest threat: CVE-2026-35273 (Oracle PeopleSoft Enterprise PeopleTools).
CVE-2025
548 CVEs: 189 in CISA KEV, 180 critical. Highest threat: CVE-2025-55182 (Meta React Server Components).
CVE-2024
303 CVEs: 100 in CISA KEV, 115 critical. Highest threat: CVE-2024-3400 (Palo Alto Networks PAN-OS).
CVE-2023
83 CVEs: 43 in CISA KEV, 24 critical. Highest threat: CVE-2023-22518 (Atlassian Confluence Data Center and Server).
CVE-2022
39 CVEs: 20 in CISA KEV, 17 critical. Highest threat: CVE-2022-26134 (Atlassian Confluence Server/Data Center).
CVE-2021
47 CVEs: 37 in CISA KEV, 24 critical. Highest threat: CVE-2021-44228 (Apache Log4j2).
CVE-2020 and older
125 CVEs: 90 in CISA KEV, 50 critical. Highest threat: CVE-2019-11510 (Ivanti Pulse Connect Secure).