How many CVEs does yahoo have?

yahoo has 73 published CVE records since 2000, including 3 in the last two years.

How many yahoo CVEs are in CISA KEV?

None of yahoo's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which yahoo products have the most CVEs?

The yahoo products with the most published CVEs are messenger, yui, toolbar, serialize-javascript, music jukebox.

What are the most common weakness types in yahoo CVEs?

yahoo's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-285 (Improper Authorization), CWE-834 (Excessive Iteration), CWE-862 (Missing Authorization).

Are there public exploits for yahoo vulnerabilities?

Yes — 25 of yahoo's CVEs have a known public exploit.

How many critical yahoo vulnerabilities are there?

yahoo has 9 critical and 11 high-severity CVEs.

What is the average severity of yahoo CVEs?

The average CVSS base score across yahoo's scored CVEs is 5.8.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

73 CVEs

yahoo Vulnerabilities

Name: yahoo vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for yahoo.

73

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

25

Public exploits

PoC or exploit code

5.8

Avg CVSS

2000–2026

Overview

yahoo has 73 published CVE records since 2000, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 25 have a known public exploit. The average CVSS base score across scored CVEs is 5.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting yahoo products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on yahoo's vulnerability posture, as a share of its 73 published CVEs.

Average CVSS: 5.8
Critical / high: 27%
Actively exploited (KEV): 0%
Public exploit available: 34%
Patch available: 16%

Severity and exploitation

How the CVSS severity of yahoo's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical9

High11

Medium49

Low4

In CISA’s Known Exploited Vulnerabilities catalog

0

None of yahoo's CVEs are currently listed in CISA's KEV catalog.

Public exploits

25

25 of yahoo's CVEs have a known public exploit available.

Most affected products

The yahoo products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in yahoo CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish yahoo CVE records.

Disclosure activity by year

How many yahoo CVEs were published each year.

2014

2

2015

1

2017

1

2019

2

2020

2

2022

1

2025

1

2026

2

Latest yahoo CVEs

The most recently disclosed vulnerabilities affecting yahoo.

Elide 7.1.17 - Permission Bypass in Sort Expression Validation
CWE-862
Medium · CVSS 5.3
EPSS 0.2%2026-06-29
Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects
CWE-834
High · CVSS 7.5
EPSS 0.5%2026-03-31
Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript
CWE-79
Medium · CVSS 5.4
EPSS 1.1%2025-02-10
High vulnerability · 2022-04-11
CWE-89
High · CVSS 8.1
EPSS 1.3%2022-04-11
High vulnerability · 2020-06-01
High · CVSS 8.1
EPSS 3.0%2020-06-01
Medium vulnerability · 2020-03-30
CWE-285
Medium · CVSS 6.8
EPSS 1.3%2020-03-30
Medium vulnerability · 2019-12-26
Medium · CVSS 6.1
EPSS 1.1%2019-12-26
Affected versions of serialize-javascript are vulnerable to Cross-site Scripting (XSS)
CWE-79
Medium · CVSS 5.4
EPSS 0.9%2019-12-05
High vulnerability · 2017-07-14
High · CVSS 7.8
EPSS 1.1%2017-07-14
Critical vulnerability · 2015-09-11
Critical · CVSS 9.3
EPSS 6.8%2015-09-11
Medium vulnerability · 2014-09-11
Medium · CVSS 5.4
EPSS 0.4%2014-09-11
Medium vulnerability · 2014-01-26
Medium · CVSS 4.3
EPSS 1.9%2014-01-26

Track new yahoo CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor yahoo CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

microsoft25,696 CVEs linux21,056 CVEs Google15,680 CVEs Apple14,957 CVEs Oracle11,815 CVEs Debian10,221 CVEs IBM8,381 CVEs Red Hat7,837 CVEs

Browse all vendors

Frequently asked questions

Common questions about yahoo vulnerabilities.

How many CVEs does yahoo have?: yahoo has 73 published CVE records since 2000, including 3 in the last two years.
How many yahoo CVEs are in CISA KEV?: None of yahoo's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which yahoo products have the most CVEs?: The yahoo products with the most published CVEs are messenger, yui, toolbar, serialize-javascript, music jukebox.
What are the most common weakness types in yahoo CVEs?: yahoo's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-285 (Improper Authorization), CWE-834 (Excessive Iteration), CWE-862 (Missing Authorization).
Are there public exploits for yahoo vulnerabilities?: Yes — 25 of yahoo's CVEs have a known public exploit.
How many critical yahoo vulnerabilities are there?: yahoo has 9 critical and 11 high-severity CVEs.
What is the average severity of yahoo CVEs?: The average CVSS base score across yahoo's scored CVEs is 5.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track yahoo vulnerabilities

Monitor new yahoo vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing