CVE Tools

Mit

131 CVEs tracked since 1999. Since Sep 1999, none of them reached CISA KEV.

Mit CVEs per month

Sep 1999 to Feb 2021. Point at a month, or focus the strip and use the arrow keys.
Mit CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
1999-0910
1999-10null or fewer
1999-11null or fewer
1999-12null or fewer
2000-0110
2000-02null or fewer
2000-03null or fewer
2000-04null or fewer
2000-05null or fewer
2000-06null or fewer
2000-0760
2000-08null or fewer
2000-09null or fewer
2000-1040
2000-11null or fewer
2000-12null or fewer
2001-01null or fewer
2001-02null or fewer
2001-03null or fewer
2001-04null or fewer
2001-0520
2001-06null or fewer
2001-07null or fewer
2001-08null or fewer
2001-0910
2001-10null or fewer
2001-11null or fewer
2001-12null or fewer
2002-01null or fewer
2002-02null or fewer
2002-0320
2002-04null or fewer
2002-0510
2002-06null or fewer
2002-07null or fewer
2002-08null or fewer
2002-09null or fewer
2002-1010
2002-11null or fewer
2002-12null or fewer
2003-01null or fewer
2003-0220
2003-0350
2003-0410
2003-05null or fewer
2003-06null or fewer
2003-07null or fewer
2003-08null or fewer
2003-09null or fewer
2003-10null or fewer
2003-11null or fewer
2003-12null or fewer
2004-01null or fewer
2004-0210
2004-03null or fewer
2004-04null or fewer
2004-05null or fewer
2004-0610
2004-07null or fewer
2004-08null or fewer
2004-0970
2004-1010
2004-11null or fewer
2004-1210
2005-01null or fewer
2005-02null or fewer
2005-0310
2005-04null or fewer
2005-05null or fewer
2005-06null or fewer
2005-0730
2005-08null or fewer
2005-09null or fewer
2005-10null or fewer
2005-11null or fewer
2005-12null or fewer
2006-01null or fewer
2006-02null or fewer
2006-03null or fewer
2006-04null or fewer
2006-05null or fewer
2006-06null or fewer
2006-07null or fewer
2006-0820
2006-09null or fewer
2006-10null or fewer
2006-11null or fewer
2006-12null or fewer
2007-0120
2007-02null or fewer
2007-03null or fewer
2007-0430
2007-05null or fewer
2007-0640
2007-07null or fewer
2007-08null or fewer
2007-0930
2007-10null or fewer
2007-11null or fewer
2007-1250
2008-01null or fewer
2008-02null or fewer
2008-0340
2008-04null or fewer
2008-05null or fewer
2008-06null or fewer
2008-07null or fewer
2008-08null or fewer
2008-09null or fewer
2008-10null or fewer
2008-11null or fewer
2008-12null or fewer
2009-01null or fewer
2009-02null or fewer
2009-03null or fewer
2009-0430
2009-05null or fewer
2009-06null or fewer
2009-07null or fewer
2009-08null or fewer
2009-09null or fewer
2009-10null or fewer
2009-11null or fewer
2009-1210
2010-0110
2010-0210
2010-0310
2010-0420
2010-0510
2010-06null or fewer
2010-07null or fewer
2010-08null or fewer
2010-09null or fewer
2010-1010
2010-11null or fewer
2010-1240
2011-01null or fewer
2011-0240
2011-0310
2011-0410
2011-05null or fewer
2011-06null or fewer
2011-0710
2011-08null or fewer
2011-09null or fewer
2011-1040
2011-11null or fewer
2011-1220
2012-01null or fewer
2012-02null or fewer
2012-03null or fewer
2012-04null or fewer
2012-05null or fewer
2012-0620
2012-07null or fewer
2012-0820
2012-09null or fewer
2012-10null or fewer
2012-11null or fewer
2012-12null or fewer
2013-01null or fewer
2013-02null or fewer
2013-0320
2013-0410
2013-0510
2013-06null or fewer
2013-07null or fewer
2013-08null or fewer
2013-09null or fewer
2013-10null or fewer
2013-1130
2013-12null or fewer
2014-01null or fewer
2014-02null or fewer
2014-03null or fewer
2014-04null or fewer
2014-05null or fewer
2014-06null or fewer
2014-0720
2014-0830
2014-09null or fewer
2014-10null or fewer
2014-11null or fewer
2014-1220
2015-01null or fewer
2015-0250
2015-03null or fewer
2015-04null or fewer
2015-0510
2015-06null or fewer
2015-07null or fewer
2015-08null or fewer
2015-09null or fewer
2015-10null or fewer
2015-1140
2015-12null or fewer
2016-01null or fewer
2016-0230
2016-0310
2016-04null or fewer
2016-05null or fewer
2016-06null or fewer
2016-07null or fewer
2016-08null or fewer
2016-09null or fewer
2016-10null or fewer
2016-11null or fewer
2016-12null or fewer
2017-01null or fewer
2017-02null or fewer
2017-03null or fewer
2017-04null or fewer
2017-05null or fewer
2017-06null or fewer
2017-07null or fewer
2017-08null or fewer
2017-09null or fewer
2017-10null or fewer
2017-11null or fewer
2017-12null or fewer
2018-0120
2018-02null or fewer
2018-0320
2018-04null or fewer
2018-05null or fewer
2018-06null or fewer
2018-07null or fewer
2018-08null or fewer
2018-09null or fewer
2018-10null or fewer
2018-11null or fewer
2018-12null or fewer
2019-01null or fewer
2019-02null or fewer
2019-03null or fewer
2019-04null or fewer
2019-05null or fewer
2019-06null or fewer
2019-07null or fewer
2019-08null or fewer
2019-09null or fewer
2019-10null or fewer
2019-11null or fewer
2019-12null or fewer
2020-01null or fewer
2020-02null or fewer
2020-03null or fewer
2020-04null or fewer
2020-05null or fewer
2020-06null or fewer
2020-07null or fewer
2020-08null or fewer
2020-09null or fewer
2020-10null or fewer
2020-11null or fewer
2020-12null or fewer
2021-01null or fewer
2021-0220

Products

The products that kept showing up in Mit's monthly top three, with their CVEs summed over those months.

  1. Kerberos 511651 months
  2. Kerberos3217 months
  3. KRB5-APPL43 months
  4. Cgiemail22 months
  5. Kerberos Ftp Client11 month
  6. Mit Kerberos11 month
  7. Pgp Public Key Server11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Mit.

  1. BDU:2026-06234Уязвимость функции krb5int_utf8_normalize() компонента ucstr.c сетевого протокола аутентификации Kerberos, позволяющая нарушителю получить доступ к конфиденциальным данным3.3
  2. BDU:2026-06233Уязвимость функции uccanoncompatdecomp() компонента ucdata.c сетевого протокола аутентификации Kerberos, позволяющая нарушителю вызвать отказ в обслуживании5.8
  3. BDU:2026-06235Уязвимость функции get_mech_set() компонента spnego_mech.c сетевого протокола аутентификации Kerberos, позволяющая нарушителю вызвать отказ в обслуживании3.3
  4. BDU:2026-06215Уязвимость функции krb5_chpw_message() сетевого протокола аутентификации Kerberos, позволяющая нарушителю вызвать отказ в обслуживании6.1
  5. BDU:2026-06232Уязвимость функции decode_krb5_flags() компонента asn1_k_encode.c сетевого протокола аутентификации Kerberos, позволяющая нарушителю вызвать отказ в обслуживании5.3
  6. CVE-2026-40356In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism regis...5.9
  7. CVE-2026-40355In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An ...5.9
  8. CVE-2025-24528In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of...7.1
  9. CVE-2025-3576Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions5.9
  10. CVE-2024-37371In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields.9.1
  11. CVE-2024-37370In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the appl...7.5
  12. CVE-2024-26462Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.5.5
  13. CVE-2024-26458Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.5.3
  14. CVE-2024-26461Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.7.5
  15. CVE-2023-39975kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is c...8.8

The record

Peak rank
#1 in Feb 2003
Busiest month shown
Sep 2004, 7 CVEs
Months with a KEV entry
0 since Sep 1999
Monthly snapshots
58 since 1999
Mit's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store