How many CVEs does MIT have?

MIT has 176 published CVE records since 1999, including 19 in the last two years.

How many MIT CVEs are in CISA KEV?

None of MIT's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which MIT products have the most CVEs?

The MIT products with the most published CVEs are Kerberos 5, kerberos, moos-ivp, krb5, krb5-appl.

What are the most common weakness types in MIT CVEs?

MIT's CVEs most often map to these CWE weakness types: CWE-476 (NULL Pointer Dereference), CWE-20 (Improper Input Validation), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-415 (Double Free).

Are there public exploits for MIT vulnerabilities?

Yes — 29 of MIT's CVEs have a known public exploit.

How many critical MIT vulnerabilities are there?

MIT has 43 critical and 56 high-severity CVEs.

What is the average severity of MIT CVEs?

The average CVSS base score across MIT's scored CVEs is 7.0.

RadicalNotion.AI

Log in Create an account

176 CVEs

MIT Vulnerabilities

Name: MIT vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for MIT.

176

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

29

Public exploits

PoC or exploit code

7.0

Avg CVSS

1999–2026

Overview

MIT has 176 published CVE records since 1999, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 29 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.

Security scorecard

A quick read on MIT's vulnerability posture, as a share of its 176 published CVEs.

Average CVSS: 7.0
Critical / high: 56%
Actively exploited (KEV): 0%
Public exploit available: 16%
Patch available: 87%

Severity and exploitation

How the CVSS severity of MIT's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical43

High56

Medium67

Low10

In CISA’s Known Exploited Vulnerabilities catalog

0

None of MIT's CVEs are currently listed in CISA's KEV catalog.

Public exploits

29

29 of MIT's CVEs have a known public exploit available.

Most affected products

The MIT products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in MIT CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish MIT CVE records.

Disclosure activity by year

How many MIT CVEs were published each year.

2018

6

2019

1

2020

3

2021

5

2022

3

2023

2

2024

5

2026

19

Latest MIT CVEs

The most recently disclosed vulnerabilities affecting MIT.

MIT krb5 through 1.22.2 NULL Pointer Dereference via krb5_rd_cred()
CWE-476
High · CVSS 7.1
EPSS 0.4%2026-10-08
MIT krb5 through 1.22.2 KDC NULL Pointer Dereference via S4U2Proxy PAC
CWE-476
Medium · CVSS 6.9
EPSS 0.5%2026-10-08
MOOS-IvP through 24.8.1 alog Splitting Path Traversal on Windows
CWE-22
Medium · CVSS 6.8
EPSS 0.2%2026-09-03
MOOS-IvP through 24.8.1 pMarineViewer Unbounded Memory Consumption via NODE_REPORT
CWE-770
High · CVSS 8.7
EPSS 0.9%2026-09-03
MOOS-IvP through 24.8.1 uFldShoreBroker Unbounded Community State Retention
CWE-770
High · CVSS 8.7
EPSS 0.8%2026-09-03
MOOS-IvP through 24.8.1 pRealm Unbounded REALMCAST_REQ Subscription Denial of Service
CWE-770
High · CVSS 8.7
EPSS 0.8%2026-09-03
MOOS-IvP through 24.8.1 uFldNodeComms Quadratic Processing Denial of Service
CWE-407
High · CVSS 8.7
EPSS 0.8%2026-09-03
MOOS-IvP through 24.8.1 BHV_IPF Demultiplexer Memory Exhaustion via Packet Count
CWE-789
High · CVSS 8.7
EPSS 0.8%2026-09-03
MOOS-IvP through 24.8.1 Out-of-Bounds Read in isBraced, isQuoted and isChevroned
CWE-125
High · CVSS 8.7
EPSS 0.8%2026-09-03
MOOS-IvP through 24.8.1 alogsplit Command Injection via Input Pathname
CWE-78
High · CVSS 8.5
EPSS 0.5%2026-09-03
MOOS-IvP through 24.8.1 Out-of-Bounds Write via Unvalidated IvP Payload Counts
CWE-190
Critical · CVSS 9.3
EPSS 1.1%2026-09-03
MOOS-IvP through 24.8.1 Buffer Overflow in IvP Function String Decoders
CWE-787
Critical · CVSS 9.3
EPSS 1.4%2026-09-03

Get an alert for each new MIT CVE, with AI-written analysis and remediation steps.

Monitor MIT CVEs

Other vendors

CVE counts for other vendors.

DrayTek177 CVEs dedecms177 CVEs MyBB177 CVEs OpenHarmony177 CVEs Sophos176 CVEs owncloud176 CVEs Kashipara176 CVEs Open WebUI176 CVEs

Browse all vendors

Frequently asked questions

Common questions about MIT vulnerabilities.

How many CVEs does MIT have?: MIT has 176 published CVE records since 1999, including 19 in the last two years.
How many MIT CVEs are in CISA KEV?: None of MIT's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which MIT products have the most CVEs?: The MIT products with the most published CVEs are Kerberos 5, kerberos, moos-ivp, krb5, krb5-appl.
What are the most common weakness types in MIT CVEs?: MIT's CVEs most often map to these CWE weakness types: CWE-476 (NULL Pointer Dereference), CWE-20 (Improper Input Validation), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-415 (Double Free).
Are there public exploits for MIT vulnerabilities?: Yes — 29 of MIT's CVEs have a known public exploit.
How many critical MIT vulnerabilities are there?: MIT has 43 critical and 56 high-severity CVEs.
What is the average severity of MIT CVEs?: The average CVSS base score across MIT's scored CVEs is 7.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track MIT vulnerabilities

Get an alert for each new MIT CVE, with AI-written analysis and remediation steps.

Create an account See pricing