How many CVEs does FreeBSD have?

FreeBSD has 603 published CVE records since 1999, including 38 in the last two years.

How many FreeBSD CVEs are in CISA KEV?

None of FreeBSD's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which FreeBSD products have the most CVEs?

The FreeBSD products with the most published CVEs are FreeBSD, libarchive, fetch, FreeBSD 12.4-RELEASE, FreeBSD 13.1-RELEASE.

What are the most common weakness types in FreeBSD CVEs?

FreeBSD's CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-323 (Reusing a Nonce, Key Pair in Encryption), CWE-787 (Out-of-bounds Write), CWE-125 (Out-of-bounds Read).

Are there public exploits for FreeBSD vulnerabilities?

Yes — 131 of FreeBSD's CVEs have a known public exploit.

How many critical FreeBSD vulnerabilities are there?

FreeBSD has 64 critical and 245 high-severity CVEs.

What is the average severity of FreeBSD CVEs?

The average CVSS base score across FreeBSD's scored CVEs is 6.4.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

603 CVEs

FreeBSD Vulnerabilities

Name: FreeBSD vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for FreeBSD.

603

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

131

Public exploits

PoC or exploit code

6.4

Avg CVSS

1999–2026

Overview

FreeBSD has 603 published CVE records since 1999, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 131 have a known public exploit. The average CVSS base score across scored CVEs is 6.4.

This page aggregates every publicly disclosed vulnerability (CVE) affecting FreeBSD products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on FreeBSD's vulnerability posture, as a share of its 603 published CVEs.

Average CVSS: 6.4
Critical / high: 51%
Actively exploited (KEV): 0%
Public exploit available: 22%
Patch available: 37%

Severity and exploitation

How the CVSS severity of FreeBSD's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical64

High245

Medium228

Low66

In CISA’s Known Exploited Vulnerabilities catalog

0

None of FreeBSD's CVEs are currently listed in CISA's KEV catalog.

Public exploits

131

131 of FreeBSD's CVEs have a known public exploit available.

Most affected products

The FreeBSD products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in FreeBSD CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish FreeBSD CVE records.

Disclosure activity by year

How many FreeBSD CVEs were published each year.

2019

31

2020

35

2021

25

2022

4

2023

15

2024

35

2025

4

2026

34

Latest FreeBSD CVEs

The most recently disclosed vulnerabilities affecting FreeBSD.

Integer overflow in vt(4) CONS_HISTORY ioctl
CWE-190
High · CVSS 7.8
EPSS 0.1%2026-06-27
ASLR bypass for setuid executables via procctl(2)
CWE-179
High · CVSS 7.8
EPSS 0.1%2026-06-27
Flaw in Linuxulator execution of setugid binaries
CWE-266
High · CVSS 7.1
EPSS 0.1%2026-06-27
Use-after-free bug in the IPV6_MSFILTER socket option handler
CWE-416
High · CVSS 7.8
EPSS 0.1%2026-06-27
sigqueue(2) missing capability mode restriction
CWE-266
Medium · CVSS 6.5
EPSS 0.1%2026-06-27
Multiple vulnerabilities in the sound(4) mmap path
CWE-125
High · CVSS 7.8
EPSS 0.1%2026-06-27
Multiple vulnerabilities in the sound(4) mmap path
CWE-416
High · CVSS 7.0
EPSS 0.1%2026-06-27
Arbitrary file overwrite via the KTLS receive path
CWE-123
High · CVSS 7.8
EPSS 0.2%2026-06-26
Missing permission check in thr_kill2(2)
CWE-269
Medium · CVSS 5.5
EPSS 0.1%2026-06-26
Incorrect libcap_net limitation list manipulation
CWE-269
Medium · CVSS 6.5
EPSS 0.2%2026-05-21
Remote code execution via installer Wi-Fi access point scans
CWE-78
High · CVSS 7.5
EPSS 0.3%2026-05-21
select(2) file descriptor set overflow causes stack overflow
CWE-121
High · CVSS 8.8
EPSS 0.2%2026-05-21

Track new FreeBSD CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor FreeBSD CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

Mattermost609 CVEs McAfee607 CVEs arubanetworks607 CVEs Symantec598 CVEs itsourcecode589 CVEs openclaw588 CVEs JetBrains580 CVEs Linux Foundation579 CVEs

Browse all vendors

Frequently asked questions

Common questions about FreeBSD vulnerabilities.

How many CVEs does FreeBSD have?: FreeBSD has 603 published CVE records since 1999, including 38 in the last two years.
How many FreeBSD CVEs are in CISA KEV?: None of FreeBSD's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which FreeBSD products have the most CVEs?: The FreeBSD products with the most published CVEs are FreeBSD, libarchive, fetch, FreeBSD 12.4-RELEASE, FreeBSD 13.1-RELEASE.
What are the most common weakness types in FreeBSD CVEs?: FreeBSD's CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-323 (Reusing a Nonce, Key Pair in Encryption), CWE-787 (Out-of-bounds Write), CWE-125 (Out-of-bounds Read).
Are there public exploits for FreeBSD vulnerabilities?: Yes — 131 of FreeBSD's CVEs have a known public exploit.
How many critical FreeBSD vulnerabilities are there?: FreeBSD has 64 critical and 245 high-severity CVEs.
What is the average severity of FreeBSD CVEs?: The average CVSS base score across FreeBSD's scored CVEs is 6.4.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track FreeBSD vulnerabilities

Monitor new FreeBSD vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing