CVE Tools
Track your stack

May 2024

5,418 CVEs published, +44% on April 2024 and +96% on May 2023. CISA added 14 to KEV.

2024 month by month

2024, month by month. Point at another month to read it.
2024: CVEs published per month
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2024January 2024: 2,698 CVEs21 added to CISA KEVFebruary 2024: 2,983 CVEs9 added to CISA KEVMarch 2024: 3,374 CVEs10 added to CISA KEVApril 2024: 3,769 CVEs10 added to CISA KEVMay 2024: 5,418 CVEs14 added to CISA KEVJune 2024: 3,333 CVEs9 added to CISA KEVJuly 2024: 3,248 CVEs14 added to CISA KEVAugust 2024: 3,024 CVEs19 added to CISA KEVSeptember 2024: 2,594 CVEs25 added to CISA KEVOctober 2024: 3,667 CVEs17 added to CISA KEVNovember 2024: 4,154 CVEs22 added to CISA KEVDecember 2024: 3,514 CVEs16 added to CISA KEV41,776+34%
Critical
3788% of the 5,029 with a CVSS score
Added to CISA KEV
1413 of this month's CVEs are in KEV, listed a median 5 days after publication
Vendors
1,4354,059 products
Top weakness
XSSCWE-79 · 669 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

  1. 1Сообщество Свободного Программного ОбеспеченияLinux, Debian Gnu/linux, Bluez1,244341new
  2. 2LinuxLinux Kernel, Linux, Kernel1,07413nonenew
  3. 3Ооо «ред Софт»Ред Ос743284new
  4. 4Ао "нппкт"Осон Основа Оnyx531184new
  5. 5CanonicalUbuntu, Snapd4983nonenew
  6. 6Ооо «русбитех-астра»Astra Linux Special Edition, Astra Linux Common Edition, Astra Linux Special Edition Для «эльбрус»467204new
  7. 7Red HatRed Hat Enterprise Linux, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 94319nonenew
  8. 8PackagistSilverstripe/framework, Typo3/cms-core, Moodle/moodle3238nonenew
  9. 9DlinkDap-2622 Firmware, Dap-2622, Dap-13252196nonenew
  10. 10D-LinkDap-2622, Dap-1325, Dir-x32602095nonenew
  11. 11DebianDebian Linux1893nonenew
  12. 12Ао «нтц Ит Роса»Rosa Virtualization 3.0, Роса Кобальт, Rosa Virtualization1445nonenew
  13. 13CampcodesComplete Web-based School Management System, Legal Case Management System, Online Laundry Management System13616nonenew
  14. 14Pdf-xchangePdf-xchange Editor, Pdf-tools1010nonenew
  15. 15FedoraprojectFedora8694new
  16. 16MicrosoftWindows Server 2022 (Server Core Installation), Windows Server 2022, Windows Server 20198113new
  17. 17FoxitsoftwarePdf Editor, Pdf Reader, Foxit Reader760nonenew
  18. 18UnknownBusiness Card, Newsletter Popup, Hl Twitter752nonenew
  19. 19KofaxPower Pdf740nonenew
  20. 20TungstenautomationPower Pdf740nonenew
  21. 21Ао «ивк»Альт Сп 10, Альт 8 Сп691nonenew
  22. 22PyPIRyu, Ait-core, Scrapy656nonenew
  23. 23Fedora ProjectFedora, 389 Directory Server641nonenew
  24. 24SourcecodesterSimple Online Bidding System, Event Registration System, Best House Rental Management System630nonenew
  25. 25GoogleAndroid, Chrome, Google Chrome5744new

Severity

How this month's CVEs score on CVSS; 389 have no score yet. Severity is not exploitation.

  • Critical3788%
  • High1,86737%
  • Medium2,58151%
  • Low2034%

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. Сообщество Свободного Программного Обеспечения1,244#1
  2. Linux1,074#2
  3. Ооо «ред Софт»743#3
  4. Ао "нппкт"531#4
  5. Canonical498#5
  6. Ооо «русбитех-астра»467#6
  7. Red Hat431#7
  8. Packagist323#8
  9. Dlink219#9
  10. D-Link209#10

What kind of weakness

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

  1. CWE-79XSS669new
  2. CWE-787Out-of-bounds Write368new
  3. CWE-89SQL Injection331new
  4. CWE-416Use After Free285new
  5. CWE-121227new
  6. CWE-476NULL Pointer Dereference226new
  7. CWE-125Out-of-bounds Read214new
  8. CWE-78OS Command Injection132new
  9. CWE-401129new
  10. CWE-22Path Traversal128new
  11. CWE-352CSRF123new
  12. CWE-862Missing Authorization110new
  13. CWE-20Improper Input Validation94new
  14. CWE-269Improper Privilege Mgmt84new
  15. CWE-122Heap Buffer Overflow83new
  16. CWE-200Information Exposure80new
  17. CWE-434Unrestricted File Upload78new
  18. CWE-120Buffer Overflow64new
  19. CWE-94Code Injection63new
  20. CWE-66762new

Where it landed

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

Which weakness, where

The top weakness classes against the vendors and the sectors that carried them.

The lighter the cell, the more CVEs. Point at one to read it.

May 2024: weakness classes by vendor and by sector: By vendor
By vendor79XSS787Out-of-bounds Write89SQL Injection416Use After Free121476NULL Pointer Dereference125Out-of-bounds Read78OS Command Injection40122Path Traversal
Сообщество Свободного Программного Обеспечения358214982105831266
Linux4713820945123
Ооо «ред Софт»340475511934622
Ао «нппкт»12816348719432
Canonical Ltd.2636911463
Ооо «русбитех-астра»2225137223302
Red Hat Inc.119351581152
Packagist731222
Dlink210811415615
D-Link Corp.210811415615
D-Link1081135515
Debian8211246161

Snapshot v1, computed Jun 11, 2026, 06:05 UTC. MethodologyAll months on record

Nuclei coverage and the detection gap are held back while the template mirror is repaired.

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store