# Every CVE by Year and Severity

Without parameters, the number of CVEs per year and severity across the whole database.

Source: https://docs.deepinfo.com/reference/vulnerability/severity-by-year-stats/examples/default/

Last updated: 2026-09-24

---
`GET https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-severity-stats-by-year`

Without parameters, the number of CVEs per year and severity across the whole database.

Example 1 of 5 · [Severity by Year Stats Examples](/reference/vulnerability/severity-by-year-stats/examples/) · endpoint: [Severity by Year Stats](/reference/vulnerability/severity-by-year-stats/)

Without parameters the counts cover every CVE. `cve_count_by_severity` splits each year into critical, high, medium, low and `other` (no score).

## What to Notice

`cve_count` is 396,067. 2026 has the most CVEs of any year, 70,790, of which 8,051 are critical.

## Request

```bash
curl 'https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-severity-stats-by-year' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json'
```

## Response

### 200 · OK

`Content-Type: application/json` · `ratelimit-limit: 1` · `ratelimit-remaining: 0` · `ratelimit-reset: 1` · `x-ratelimit-limit-second: 1` · `x-ratelimit-remaining-second: 0` · `deepinfo-request-id: 5f0c6a8e-1b2d-4c3e-9f4a-7b8c9d0e1f2a`

```json
{
  "vendor": "",
  "product": "",
  "version": "",
  "cve_count": 396067,
  "cve_count_by_year": [
    {
      "year": 1988,
      "cve_count": 2,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 2,
        "medium": 0,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 1989,
      "cve_count": 3,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 2,
        "medium": 1,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 1990,
      "cve_count": 11,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 8,
        "medium": 2,
        "low": 1,
        "other": 0
      }
    },
    {
      "year": 1991,
      "cve_count": 15,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 11,
        "medium": 4,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 1992,
      "cve_count": 14,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 12,
        "medium": 0,
        "low": 1,
        "other": 1
      }
    },
    {
      "year": 1993,
      "cve_count": 13,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 8,
        "medium": 3,
        "low": 2,
        "other": 0
      }
    },
    {
      "year": 1994,
      "cve_count": 26,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 14,
        "medium": 10,
        "low": 1,
        "other": 1
      }
    },
    {
      "year": 1995,
      "cve_count": 25,
      "cve_count_by_severity": {
        "critical": 1,
        "high": 17,
        "medium": 6,
        "low": 1,
        "other": 0
      }
    },
    {
      "year": 1996,
      "cve_count": 75,
      "cve_count_by_severity": {
        "critical": 1,
        "high": 43,
        "medium": 21,
        "low": 9,
        "other": 1
      }
    },
    {
      "year": 1997,
      "cve_count": 253,
      "cve_count_by_severity": {
        "critical": 1,
        "high": 143,
        "medium": 89,
        "low": 19,
        "other": 1
      }
    },
    {
      "year": 1998,
      "cve_count": 247,
      "cve_count_by_severity": {
        "critical": 1,
        "high": 137,
        "medium": 85,
        "low": 23,
        "other": 1
      }
    },
    {
      "year": 1999,
      "cve_count": 923,
      "cve_count_by_severity": {
        "critical": 3,
        "high": 424,
        "medium": 356,
        "low": 111,
        "other": 29
      }
    },
    {
      "year": 2000,
      "cve_count": 1020,
      "cve_count_by_severity": {
        "critical": 2,
        "high": 454,
        "medium": 467,
        "low": 96,
        "other": 1
      }
    },
    {
      "year": 2001,
      "cve_count": 1679,
      "cve_count_by_severity": {
        "critical": 12,
        "high": 776,
        "medium": 706,
        "low": 182,
        "other": 3
      }
    },
    {
      "year": 2002,
      "cve_count": 2170,
      "cve_count_by_severity": {
        "critical": 10,
        "high": 1023,
        "medium": 980,
        "low": 143,
        "other": 14
      }
    },
    {
      "year": 2003,
      "cve_count": 1548,
      "cve_count_by_severity": {
        "critical": 9,
        "high": 674,
        "medium": 747,
        "low": 97,
        "other": 21
      }
    },
    {
      "year": 2004,
      "cve_count": 2479,
      "cve_count_by_severity": {
        "critical": 10,
        "high": 973,
        "medium": 1265,
        "low": 203,
        "other": 28
      }
    },
    {
      "year": 2005,
      "cve_count": 5010,
      "cve_count_by_severity": {
        "critical": 13,
        "high": 2048,
        "medium": 2430,
        "low": 441,
        "other": 78
      }
    },
    {
      "year": 2006,
      "cve_count": 6659,
      "cve_count_by_severity": {
        "critical": 11,
        "high": 2763,
        "medium": 3325,
        "low": 509,
        "other": 51
      }
    },
    {
      "year": 2007,
      "cve_count": 6596,
      "cve_count_by_severity": {
        "critical": 21,
        "high": 3162,
        "medium": 3101,
        "low": 232,
        "other": 80
      }
    },
    {
      "year": 2008,
      "cve_count": 5664,
      "cve_count_by_severity": {
        "critical": 19,
        "high": 2846,
        "medium": 2582,
        "low": 185,
        "other": 32
      }
    },
    {
      "year": 2009,
      "cve_count": 5778,
      "cve_count_by_severity": {
        "critical": 15,
        "high": 2734,
        "medium": 2786,
        "low": 197,
        "other": 46
      }
    },
    {
      "year": 2010,
      "cve_count": 4667,
      "cve_count_by_severity": {
        "critical": 28,
        "high": 2093,
        "medium": 2241,
        "low": 277,
        "other": 28
      }
    },
    {
      "year": 2011,
      "cve_count": 4172,
      "cve_count_by_severity": {
        "critical": 5,
        "high": 1784,
        "medium": 2100,
        "low": 261,
        "other": 22
      }
    },
    {
      "year": 2012,
      "cve_count": 5351,
      "cve_count_by_severity": {
        "critical": 21,
        "high": 1724,
        "medium": 3035,
        "low": 508,
        "other": 63
      }
    },
    {
      "year": 2013,
      "cve_count": 5324,
      "cve_count_by_severity": {
        "critical": 23,
        "high": 1734,
        "medium": 2913,
        "low": 517,
        "other": 137
      }
    },
    {
      "year": 2014,
      "cve_count": 8008,
      "cve_count_by_severity": {
        "critical": 20,
        "high": 1924,
        "medium": 5324,
        "low": 660,
        "other": 80
      }
    },
    {
      "year": 2015,
      "cve_count": 6595,
      "cve_count_by_severity": {
        "critical": 50,
        "high": 2352,
        "medium": 3503,
        "low": 589,
        "other": 101
      }
    },
    {
      "year": 2016,
      "cve_count": 6517,
      "cve_count_by_severity": {
        "critical": 887,
        "high": 2895,
        "medium": 2446,
        "low": 221,
        "other": 68
      }
    },
    {
      "year": 2017,
      "cve_count": 18113,
      "cve_count_by_severity": {
        "critical": 2111,
        "high": 6597,
        "medium": 5698,
        "low": 236,
        "other": 3471
      }
    },
    {
      "year": 2018,
      "cve_count": 18154,
      "cve_count_by_severity": {
        "critical": 2597,
        "high": 7542,
        "medium": 6203,
        "low": 168,
        "other": 1644
      }
    },
    {
      "year": 2019,
      "cve_count": 18938,
      "cve_count_by_severity": {
        "critical": 2635,
        "high": 7206,
        "medium": 7153,
        "low": 311,
        "other": 1633
      }
    },
    {
      "year": 2020,
      "cve_count": 19222,
      "cve_count_by_severity": {
        "critical": 2719,
        "high": 7681,
        "medium": 7498,
        "low": 424,
        "other": 900
      }
    },
    {
      "year": 2021,
      "cve_count": 21950,
      "cve_count_by_severity": {
        "critical": 2676,
        "high": 8566,
        "medium": 8463,
        "low": 444,
        "other": 1801
      }
    },
    {
      "year": 2022,
      "cve_count": 26431,
      "cve_count_by_severity": {
        "critical": 4247,
        "high": 10159,
        "medium": 10179,
        "low": 487,
        "other": 1359
      }
    },
    {
      "year": 2023,
      "cve_count": 30949,
      "cve_count_by_severity": {
        "critical": 4634,
        "high": 10956,
        "medium": 12802,
        "low": 423,
        "other": 2134
      }
    },
    {
      "year": 2024,
      "cve_count": 40704,
      "cve_count_by_severity": {
        "critical": 4300,
        "high": 14036,
        "medium": 20755,
        "low": 853,
        "other": 760
      }
    },
    {
      "year": 2025,
      "cve_count": 49972,
      "cve_count_by_severity": {
        "critical": 4174,
        "high": 15905,
        "medium": 24068,
        "low": 3099,
        "other": 2726
      }
    },
    {
      "year": 2026,
      "cve_count": 70790,
      "cve_count_by_severity": {
        "critical": 8051,
        "high": 28484,
        "medium": 25375,
        "low": 4805,
        "other": 4075
      }
    }
  ]
}
```