# CVEs of the Vendor Linux by Year

The CVEs of every product of the vendor linux, mostly the Linux kernel, per year and severity.

Source: https://docs.deepinfo.com/reference/vulnerability/severity-by-year-stats/examples/vendor-linux/

Last updated: 2026-09-24

---
`GET https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-severity-stats-by-year?vendor=linux`

The CVEs of every product of the vendor linux, mostly the Linux kernel, per year and severity.

Example 2 of 5 · [Severity by Year Stats Examples](/reference/vulnerability/severity-by-year-stats/examples/) · endpoint: [Severity by Year Stats](/reference/vulnerability/severity-by-year-stats/)

Tags: `vendor` `linux`

`vendor` alone narrows the counts to the CVEs whose product list includes a product of that vendor; the response repeats `vendor` and leaves `product` empty.

## What to Notice

`cve_count` is 19,107 since 1995, 40 more than the Linux kernel alone has (19,067 with `product=linux_kernel` on the same day). 2025 has the most (4,722), most of them medium (3,415).

## Request

| Parameter | In | Value |
|---|---|---|
| `vendor` | query | `linux` |

```bash
curl 'https://api.deepinfo.com/v1/explore/vulnerability-insight/vulnerability-severity-stats-by-year?vendor=linux' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json'
```

## Response

### 200 · OK

`Content-Type: application/json` · `ratelimit-limit: 1` · `ratelimit-remaining: 0` · `ratelimit-reset: 1` · `x-ratelimit-limit-second: 1` · `x-ratelimit-remaining-second: 0` · `deepinfo-request-id: 5f0c6a8e-1b2d-4c3e-9f4a-7b8c9d0e1f2a`

```json
{
  "vendor": "linux",
  "product": "",
  "version": "",
  "cve_count": 19107,
  "cve_count_by_year": [
    {
      "year": 1995,
      "cve_count": 1,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 0,
        "medium": 1,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 1996,
      "cve_count": 2,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 1,
        "medium": 1,
        "low": 0,
        "other": 0
      }
    },
    {
      "year": 1997,
      "cve_count": 10,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 1,
        "medium": 8,
        "low": 1,
        "other": 0
      }
    },
    {
      "year": 1998,
      "cve_count": 10,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 4,
        "medium": 3,
        "low": 3,
        "other": 0
      }
    },
    {
      "year": 1999,
      "cve_count": 19,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 5,
        "medium": 10,
        "low": 4,
        "other": 0
      }
    },
    {
      "year": 2000,
      "cve_count": 5,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 2,
        "medium": 2,
        "low": 1,
        "other": 0
      }
    },
    {
      "year": 2001,
      "cve_count": 23,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 5,
        "medium": 5,
        "low": 13,
        "other": 0
      }
    },
    {
      "year": 2002,
      "cve_count": 15,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 4,
        "medium": 2,
        "low": 9,
        "other": 0
      }
    },
    {
      "year": 2003,
      "cve_count": 28,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 6,
        "medium": 14,
        "low": 8,
        "other": 0
      }
    },
    {
      "year": 2004,
      "cve_count": 52,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 17,
        "medium": 12,
        "low": 23,
        "other": 0
      }
    },
    {
      "year": 2005,
      "cve_count": 134,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 26,
        "medium": 48,
        "low": 60,
        "other": 0
      }
    },
    {
      "year": 2006,
      "cve_count": 91,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 24,
        "medium": 43,
        "low": 24,
        "other": 0
      }
    },
    {
      "year": 2007,
      "cve_count": 105,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 39,
        "medium": 49,
        "low": 17,
        "other": 0
      }
    },
    {
      "year": 2008,
      "cve_count": 98,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 42,
        "medium": 46,
        "low": 10,
        "other": 0
      }
    },
    {
      "year": 2009,
      "cve_count": 128,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 49,
        "medium": 69,
        "low": 10,
        "other": 0
      }
    },
    {
      "year": 2010,
      "cve_count": 193,
      "cve_count_by_severity": {
        "critical": 4,
        "high": 85,
        "medium": 66,
        "low": 38,
        "other": 0
      }
    },
    {
      "year": 2011,
      "cve_count": 156,
      "cve_count_by_severity": {
        "critical": 0,
        "high": 72,
        "medium": 62,
        "low": 22,
        "other": 0
      }
    },
    {
      "year": 2012,
      "cve_count": 227,
      "cve_count_by_severity": {
        "critical": 1,
        "high": 103,
        "medium": 95,
        "low": 28,
        "other": 0
      }
    },
    {
      "year": 2013,
      "cve_count": 280,
      "cve_count_by_severity": {
        "critical": 1,
        "high": 97,
        "medium": 138,
        "low": 44,
        "other": 0
      }
    },
    {
      "year": 2014,
      "cve_count": 234,
      "cve_count_by_severity": {
        "critical": 1,
        "high": 113,
        "medium": 98,
        "low": 22,
        "other": 0
      }
    },
    {
      "year": 2015,
      "cve_count": 431,
      "cve_count_by_severity": {
        "critical": 9,
        "high": 316,
        "medium": 88,
        "low": 18,
        "other": 0
      }
    },
    {
      "year": 2016,
      "cve_count": 474,
      "cve_count_by_severity": {
        "critical": 18,
        "high": 339,
        "medium": 116,
        "low": 1,
        "other": 0
      }
    },
    {
      "year": 2017,
      "cve_count": 628,
      "cve_count_by_severity": {
        "critical": 35,
        "high": 379,
        "medium": 209,
        "low": 5,
        "other": 0
      }
    },
    {
      "year": 2018,
      "cve_count": 282,
      "cve_count_by_severity": {
        "critical": 14,
        "high": 117,
        "medium": 148,
        "low": 3,
        "other": 0
      }
    },
    {
      "year": 2019,
      "cve_count": 394,
      "cve_count_by_severity": {
        "critical": 39,
        "high": 165,
        "medium": 176,
        "low": 14,
        "other": 0
      }
    },
    {
      "year": 2020,
      "cve_count": 244,
      "cve_count_by_severity": {
        "critical": 15,
        "high": 80,
        "medium": 142,
        "low": 7,
        "other": 0
      }
    },
    {
      "year": 2021,
      "cve_count": 429,
      "cve_count_by_severity": {
        "critical": 20,
        "high": 195,
        "medium": 204,
        "low": 10,
        "other": 0
      }
    },
    {
      "year": 2022,
      "cve_count": 592,
      "cve_count_by_severity": {
        "critical": 36,
        "high": 243,
        "medium": 298,
        "low": 15,
        "other": 0
      }
    },
    {
      "year": 2023,
      "cve_count": 611,
      "cve_count_by_severity": {
        "critical": 33,
        "high": 270,
        "medium": 294,
        "low": 14,
        "other": 0
      }
    },
    {
      "year": 2024,
      "cve_count": 4528,
      "cve_count_by_severity": {
        "critical": 31,
        "high": 1233,
        "medium": 3216,
        "low": 48,
        "other": 0
      }
    },
    {
      "year": 2025,
      "cve_count": 4722,
      "cve_count_by_severity": {
        "critical": 32,
        "high": 1243,
        "medium": 3415,
        "low": 32,
        "other": 0
      }
    },
    {
      "year": 2026,
      "cve_count": 3961,
      "cve_count_by_severity": {
        "critical": 273,
        "high": 1733,
        "medium": 1914,
        "low": 41,
        "other": 0
      }
    }
  ]
}
```