1000 Projects vulnerabilities

Records are attributed to 1000 Projects from the vendor named in the source records. About the data.

CVE records per year

CVE records published per year for 1000 Projects
CVE records published per year for 1000 ProjectsBar chart of CVE records attributed to 1000 Projects per publication year, 2017 to 2026. 2026 is not finished.02040602024: 50 CVE records2025: 35 CVE records2026: 2 CVE records (period not finished)2502017201820192020202120222023202420252026
Show data as a table
YearCVE records
20170
20180
20190
20200
20210
20220
20230
202450
202535
20262

2026 is partial (through 28 Oct 2026), shown in a lighter bar.

Severity by publication year. "Critical or high" is the share of scored records; "Not scored" is the share of all records.
YearRecordsCriticalHighCritical or highNot scored
20262000%0%
202535000%0%
202450000%0%
2023000——
2022000——
2021000——
2020000——
2019000——
2018000——
2017000——

Source: CVE List V5 (CVE Program), cve_2026-10-28_0000Z, as of 28 Oct 2026. About the data.

Highest exploit-prediction scores (EPSS)

EPSS estimates the probability that a vulnerability is exploited in the next 30 days. These are the 10 highest-scoring 1000 Projects records today.

CVEEPSSPercentileSeverityIn KEV
CVE-2024-115911%61.5%MediumNo
CVE-2024-108440.9%60.4%MediumNo
CVE-2024-108450.9%60.4%MediumNo
CVE-2024-115920.9%59.9%MediumNo
CVE-2024-124970.9%58.6%MediumNo
CVE-2024-115900.9%58.1%MediumNo
CVE-2024-116470.9%58.1%MediumNo
CVE-2024-116480.9%58.1%MediumNo
CVE-2024-116490.9%58.1%MediumNo
CVE-2024-112580.8%56.7%MediumNo

Source: FIRST Exploit Prediction Scoring System (EPSS), v2026.06.15, as of 28 Oct 2026; CVE List V5 (CVE Program), cve_2026-10-28_0000Z, as of 28 Oct 2026; CISA Known Exploited Vulnerabilities (KEV) catalog, 2026.10.27, as of 27 Oct 2026. About the data.

All vendors · KEV catalog overview