How many CVEs does FreeBSD have?

FreeBSD has 635 published CVE records since 1999, including 70 in the last two years.

How many FreeBSD CVEs are in CISA KEV?

None of FreeBSD's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which FreeBSD products have the most CVEs?

The FreeBSD products with the most published CVEs are FreeBSD, libarchive, fetch, FreeBSD 12.4-RELEASE, FreeBSD 13.1-RELEASE.

What are the most common weakness types in FreeBSD CVEs?

FreeBSD's CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-122 (Heap-based Buffer Overflow), CWE-787 (Out-of-bounds Write), CWE-323 (Reusing a Nonce, Key Pair in Encryption).

Are there public exploits for FreeBSD vulnerabilities?

Yes — 131 of FreeBSD's CVEs have a known public exploit.

How many critical FreeBSD vulnerabilities are there?

FreeBSD has 66 critical and 269 high-severity CVEs.

What is the average severity of FreeBSD CVEs?

The average CVSS base score across FreeBSD's scored CVEs is 6.5.

FreeBSD Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: FreeBSD vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Overview

FreeBSD has 635 published CVE records since 1999, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 131 have a known public exploit. The average CVSS base score across scored CVEs is 6.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting FreeBSD products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on FreeBSD's vulnerability posture, as a share of its 635 published CVEs.

Average CVSS: 6.5
Critical / high: 53%
Actively exploited (KEV): 0%
Public exploit available: 21%
Patch available: 40%

Severity and exploitation

How the CVSS severity of FreeBSD's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical66

High269

Medium231

Low69

In CISA’s Known Exploited Vulnerabilities catalog

None of FreeBSD's CVEs are currently listed in CISA's KEV catalog.

Public exploits

131

131 of FreeBSD's CVEs have a known public exploit available.

Most affected products

The FreeBSD products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in FreeBSD CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish FreeBSD CVE records.

Disclosure activity by year

How many FreeBSD CVEs were published each year.

2019

2020

2021

2022

2023

2024

2025

Latest FreeBSD CVEs

The most recently disclosed vulnerabilities affecting FreeBSD.

TOCTOU race in POSIX shared memory large page configuration
CWE-367
High · CVSS 7.8
EPSS 0.1%2026-08-26
Kernel use-after-free via tty ioctls
CWE-362
High · CVSS 7.0
EPSS 0.1%2026-08-26
ppp(8): missing length validation in mp_SetEnddisc()
CWE-130
High · CVSS 7.8
EPSS 0.2%2026-08-26
ppp(8): missing length validation in LcpDecodeConfig()

Other vendors

Browse vulnerabilities for other tracked vendors.

UNISOC658 CVEs QNAP643 CVEs itsourcecode639 CVEs Moodle633 CVEs campcodes631 CVEs Mattermost626 CVEs JetBrains617 CVEs arubanetworks612 CVEs

Browse all vendors

Frequently asked questions

Common questions about FreeBSD vulnerabilities.

How many CVEs does FreeBSD have?: FreeBSD has 635 published CVE records since 1999, including 70 in the last two years.
How many FreeBSD CVEs are in CISA KEV?: None of FreeBSD's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which FreeBSD products have the most CVEs?: The FreeBSD products with the most published CVEs are FreeBSD, libarchive, fetch, FreeBSD 12.4-RELEASE, FreeBSD 13.1-RELEASE.
What are the most common weakness types in FreeBSD CVEs?: FreeBSD's CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-122 (Heap-based Buffer Overflow), CWE-787 (Out-of-bounds Write), CWE-323 (Reusing a Nonce, Key Pair in Encryption).
Are there public exploits for FreeBSD vulnerabilities?: Yes — 131 of FreeBSD's CVEs have a known public exploit.
How many critical FreeBSD vulnerabilities are there?: FreeBSD has 66 critical and 269 high-severity CVEs.
What is the average severity of FreeBSD CVEs?: The average CVSS base score across FreeBSD's scored CVEs is 6.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track FreeBSD vulnerabilities

Monitor new FreeBSD vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing