What is the freebsd CNA?

freebsd is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 172 CVE records since 2005.

How many CVEs has freebsd published?

freebsd has published 172 CVE records, including 37 in the last two years.

What is freebsd's CVE data quality grade?

RadicalNotion.AI grades freebsd's CVE data quality as F, with an overall completeness score of 39.7%. This reflects how consistently its CVE records include vendor (49.4%), product (79.7%), CVSS (0%), and CWE (29.7%) information.

What products does freebsd publish CVEs for?

freebsd most frequently publishes CVEs for FreeBSD, clustered data ontap, libarchive, yamt, mpd.

Which vendors does freebsd cover?

freebsd publishes CVEs across 2 distinct vendors, most often FreeBSD, netapp, yamt, mpd project, stormshield.

Is freebsd actively publishing CVEs?

freebsd is currently active, based on 37 CVEs in the last two years.

How many critical CVEs has freebsd published?

freebsd has published 32 critical-severity CVEs and 99 high-severity CVEs.

What are the most common weakness types in freebsd's CVEs?

freebsd's CVEs most often map to these CWE weakness types: CWE-787 (Out-of-bounds Write), CWE-416 (Use After Free), CWE-125 (Out-of-bounds Read), CWE-122 (Heap-based Buffer Overflow).

How does freebsd rank among CNAs?

By total CVE volume, freebsd ranks #91 of 370 CNAs, and it reports more complete CVE records than 4% of all CNAs.

Grade F

Active

freebsd

Name: freebsd CNA CVE data quality report card
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE Numbering Authority

Latest CVE published October 22, 2025

172

CVEs published

Total assigned

20.5

Years active

2005–2025

N/A

Avg CVSS

Across scored CVEs

Recent CVEs

Last 2 years

Overview

freebsd is a CVE Numbering Authority that has published 172 CVE records since 2005. It is currently classified as active, with 37 CVEs published in the last two years. Its CVE data quality is graded F (39.7% overall completeness).

Among the 370 CNAs tracked here, freebsd ranks #91 by CVE volume and reports more complete records than 4% of all CNAs.

Data quality report card

How complete and consistent freebsd's CVE records are, scored across vendor, product, CVSS, and CWE coverage.

A CVE record only requires a description to be published. “Completeness” measures how often freebsd also fills in the optional — but extremely useful — fields that make a vulnerability actually actionable: the affected vendor and product, a CVSS severity score, and a CWE weakness type. A higher score means more of this CNA’s CVEs include those details, so defenders spend less time enriching records by hand.

Report card grade

39.7%

Overall score

Overall completeness39.7%

Vendor completeness49.4%

Product completeness79.7%

CVSS completeness0%

CWE completeness29.7%

100%

Update rate

Records revised after publishing

Vendor diversity

Distinct vendors covered

361 chars

Avg description length

Per CVE record

2005-04-13

First CVE date

Earliest assignment

2025-10-22

Latest CVE date

Most recent assignment

N/A

Average CVSS

Across scored CVEs

What these scores mean

Vendor completeness: The share of this CNA's CVEs that name an affected vendor.
Product completeness: The share that name a specific affected product.
CVSS completeness: The share that include a CVSS severity score.
CWE completeness: The share mapped to a CWE weakness type.
Update rate: How often this CNA revises CVE records after first publishing them.
Vendor diversity: How many distinct vendors this CNA publishes CVEs for.

Severity and exploitation

How the CVSS severity of freebsd's published CVEs breaks down, and how many are known to be exploited in the wild.

Critical32

High99

Medium67

Low8

In CISA’s Known Exploited Vulnerabilities catalog

None of freebsd's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Common weakness types

The CWE weakness categories freebsd most often assigns to its CVEs. Follow any weakness to its full explanation.

Publishing activity by year

How many CVEs freebsd has published each year.

2019

2020

2021

2022

2023

2024

2025

2026

12-month change

How freebsd's CVE data quality has shifted over the trailing year.

Previous grade

Current grade

Score change

32% → 71.3% (+39.3%)

Improved most in CWE Completeness (+76.4 pts)

Top vendors

The vendors freebsd publishes the most CVEs for.

FreeBSD201 CVEs
netapp9 CVEs
yamt2 CVEs
mpd project2 CVEs
stormshield2 CVEs
Heimdal1 CVEs
gnu1 CVEs
fedoraproject1 CVEs

Latest CVEs

The most recent CVEs assigned by freebsd.

CVE-2026-49416CWE-190
Integer overflow in vt(4) CONS_HISTORY ioctl
High · CVSS 7.8
EPSS 0.1%2026-06-27
CVE-2026-49414CWE-179
ASLR bypass for setuid executables via procctl(2)
High · CVSS 7.8
EPSS 0.1%2026-06-27
CVE-2026-49413CWE-266
Flaw in Linuxulator execution of setugid binaries
High · CVSS 7.1
EPSS 0.1%2026-06-27
CVE-2026-49412CWE-416
Use-after-free bug in the IPV6_MSFILTER socket option handler
High · CVSS 7.8
EPSS 0.1%2026-06-27
CVE-2026-45259CWE-266
sigqueue(2) missing capability mode restriction
Medium · CVSS 6.5
EPSS 0.1%2026-06-27
CVE-2026-45258CWE-125
Multiple vulnerabilities in the sound(4) mmap path
High · CVSS 7.8
EPSS 0.1%2026-06-27
CVE-2026-49417CWE-416
Multiple vulnerabilities in the sound(4) mmap path
High · CVSS 7.0
EPSS 0.1%2026-06-27
CVE-2026-45257CWE-123
Arbitrary file overwrite via the KTLS receive path
High · CVSS 7.8
EPSS 0.2%2026-06-26
CVE-2026-45256CWE-269
Missing permission check in thr_kill2(2)
Medium · CVSS 5.5
EPSS 0.1%2026-06-26
CVE-2026-45254CWE-269
Incorrect libcap_net limitation list manipulation
Medium · CVSS 6.5
EPSS 0.2%2026-05-21
CVE-2026-45255CWE-78
Remote code execution via installer Wi-Fi access point scans
High · CVSS 7.5
EPSS 0.3%2026-05-21
CVE-2026-39461CWE-121
select(2) file descriptor set overflow causes stack overflow
High · CVSS 8.8
EPSS 0.2%2026-05-21

Track new freebsd CVEs as they are published and get AI-written analysis and remediation guidance.

Monitor freebsd CVEs

Other CNAs

Compare data quality across other CVE Numbering Authorities.

mitreGrade F · 112,208 CVEs PatchstackGrade A · 14,729 CVEs VulDBGrade A · 12,140 CVEs microsoftGrade F · 11,701 CVEs redhatGrade F · 10,745 CVEs GitHub_MGrade A · 10,605 CVEs LinuxGrade F · 10,294 CVEs WordfenceGrade A · 8,652 CVEs

Browse all CNAs

Frequently asked questions

Common questions about the freebsd CNA.

What is the freebsd CNA?: freebsd is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 172 CVE records since 2005.
How many CVEs has freebsd published?: freebsd has published 172 CVE records, including 37 in the last two years.
What is freebsd's CVE data quality grade?: RadicalNotion.AI grades freebsd's CVE data quality as F, with an overall completeness score of 39.7%. This reflects how consistently its CVE records include vendor (49.4%), product (79.7%), CVSS (0%), and CWE (29.7%) information.
What products does freebsd publish CVEs for?: freebsd most frequently publishes CVEs for FreeBSD, clustered data ontap, libarchive, yamt, mpd.
Which vendors does freebsd cover?: freebsd publishes CVEs across 2 distinct vendors, most often FreeBSD, netapp, yamt, mpd project, stormshield.
Is freebsd actively publishing CVEs?: freebsd is currently active, based on 37 CVEs in the last two years.
How many critical CVEs has freebsd published?: freebsd has published 32 critical-severity CVEs and 99 high-severity CVEs.
Are any of freebsd's CVEs in CISA's Known Exploited Vulnerabilities catalog?: No. None of freebsd's CVEs are currently listed in CISA's Known Exploited Vulnerabilities (KEV) catalog.
What are the most common weakness types in freebsd's CVEs?: freebsd's CVEs most often map to these CWE weakness types: CWE-787 (Out-of-bounds Write), CWE-416 (Use After Free), CWE-125 (Out-of-bounds Read), CWE-122 (Heap-based Buffer Overflow).
How does freebsd rank among CNAs?: By total CVE volume, freebsd ranks #91 of 370 CNAs, and it reports more complete CVE records than 4% of all CNAs.

References

CNA report-card grades are computed by RadicalNotion.AI from published CVE records. CVE data is sourced from the CVE Program.

Track freebsd CVEs

Monitor new vulnerabilities as this CNA publishes them, with AI-written analysis and remediation guidance.

Start free See pricing