# 2025 CVE Data Review

DevFeed: [2025 CVE Data Review](<https://devfeed.tech/articles/2025-cve-data-review-27475.md>)

Original publisher: [Read original article](<https://jerrygamblin.com/2026/01/01/2025-cve-data-review/>)

Author: jgamblin

Published: 2026-01-01T18:38:43Z

Content type: article

Language: en

Sources: [Jerry Gamblin](<https://devfeed.tech/sources/jerry-gamblin.md>)

Topics: [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [data](<https://devfeed.tech/topics/data.md>), [Statistics](<https://devfeed.tech/topics/statistics.md>), [Security](<https://devfeed.tech/topics/security.md>), [Content Management System](<https://devfeed.tech/topics/cms.md>), [Linux Kernel](<https://devfeed.tech/topics/linux-kernel.md>), [web applications](<https://devfeed.tech/topics/web-applications.md>)

Tags: [2025](<https://devfeed.tech/tags/2025.md>), [analysis](<https://devfeed.tech/tags/analysis.md>), [cms](<https://devfeed.tech/tags/cms.md>), [cve](<https://devfeed.tech/tags/cve.md>), [data](<https://devfeed.tech/tags/data.md>), [linux-kernel](<https://devfeed.tech/tags/linux-kernel.md>), [patch-tuesday](<https://devfeed.tech/tags/patch-tuesday.md>), [report](<https://devfeed.tech/tags/report.md>), [statistics](<https://devfeed.tech/tags/statistics.md>), [supply-chain](<https://devfeed.tech/tags/supply-chain.md>), [trends](<https://devfeed.tech/tags/trends.md>), [uncategorized](<https://devfeed.tech/tags/uncategorized.md>), [volume](<https://devfeed.tech/tags/volume.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

## AI overview

This review analyzes 2025 CVE publication data, reporting 48,185 published CVEs, a 20.6% increase from 2024. It highlights stable median CVSS scores, growth in web application and CMS-related flaws, publication clustering around vendor release cycles, and the Linux Kernel as the product with the most listed vulnerabilities. The article recommends prioritizing vulnerabilities by exploitability and automating remediation where possible.

## Source excerpt

2025 set a new baseline with 48,185 published CVEs. While the sheer volume is climbing, the median CVSS score remained surprisingly stable. We are seeing a distinct shift toward web application flaws (specifically in the CMS ecosystem) and a wider distribution of vendors, proving that vulnerabilities are spreading deeper into the supply chain. This massive growth ... Read more