Bugs
Does software still break?
Contributes to: Is software cheaper and more reliable?. Signal score: 0 / 100. Relative weight within this question: 1.
StatusMore reported
Latest value98,371
Year over year+109%
Distance from highAt its high
Caution
This counts reported vulnerabilities, not all bugs. More software and better detection, including by AI, also raise the count.
Observed trend
New published vulnerabilities, rolling 12 months, one point per month.
This chart shows counts. The score below adjusts counts for git pushes, so the two can move in opposite directions.
New published vulnerabilities, rolling 12 months, one point per month. · 2019-12 – 2026-10
View data table
| Period / observation | New published vulnerabilities, rolling 12 months, one point per month. |
|---|---|
| 2019-12 | 17,305 |
| 2020-01 | 17,749 |
| 2020-02 | 18,305 |
| 2020-03 | 18,877 |
| 2020-04 | 19,531 |
| 2020-05 | 19,232 |
| 2020-06 | 19,764 |
| 2020-07 | 19,563 |
| 2020-08 | 18,717 |
| 2020-09 | 18,779 |
| 2020-10 | 18,776 |
| 2020-11 | 18,370 |
| 2020-12 | 18,322 |
| 2021-01 | 18,190 |
| 2021-02 | 18,252 |
| 2021-03 | 17,944 |
| 2021-04 | 17,575 |
| 2021-05 | 18,031 |
| 2021-06 | 17,957 |
| 2021-07 | 18,122 |
| 2021-08 | 19,052 |
| 2021-09 | 19,361 |
| 2021-10 | 19,499 |
| 2021-11 | 19,736 |
| 2021-12 | 20,149 |
| 2022-01 | 20,641 |
| 2022-02 | 21,127 |
| 2022-03 | 21,739 |
| 2022-04 | 21,967 |
| 2022-05 | 22,515 |
| 2022-06 | 23,082 |
| 2022-07 | 23,469 |
| 2022-08 | 23,701 |
| 2022-09 | 23,996 |
| 2022-10 | 24,144 |
| 2022-11 | 24,594 |
| 2022-12 | 25,073 |
| 2023-01 | 25,394 |
| 2023-02 | 25,574 |
| 2023-03 | 26,032 |
| 2023-04 | 26,316 |
| 2023-05 | 26,713 |
| 2023-06 | 26,818 |
| 2023-07 | 27,154 |
| 2023-08 | 27,314 |
| 2023-09 | 27,265 |
| 2023-10 | 28,096 |
| 2023-11 | 28,587 |
| 2023-12 | 28,816 |
| 2024-01 | 29,073 |
| 2024-02 | 29,729 |
| 2024-03 | 30,522 |
| 2024-04 | 31,813 |
| 2024-05 | 34,394 |
| 2024-06 | 35,088 |
| 2024-07 | 35,896 |
| 2024-08 | 36,315 |
| 2024-09 | 36,681 |
| 2024-10 | 37,565 |
| 2024-11 | 39,172 |
| 2024-12 | 39,953 |
| 2025-01 | 41,634 |
| 2025-02 | 42,529 |
| 2025-03 | 43,218 |
| 2025-04 | 43,631 |
| 2025-05 | 42,612 |
| 2025-06 | 43,215 |
| 2025-07 | 43,878 |
| 2025-08 | 44,610 |
| 2025-09 | 46,417 |
| 2025-10 | 47,126 |
| 2025-11 | 46,091 |
| 2025-12 | 48,151 |
| 2026-01 | 48,178 |
| 2026-02 | 49,121 |
| 2026-03 | 51,357 |
| 2026-04 | 53,133 |
| 2026-05 | 56,089 |
| 2026-06 | 60,350 |
| 2026-07 | 66,344 |
| 2026-08 | 74,972 |
| 2026-09 | 85,584 |
| 2026-10 | 98,371 |
What it measures
- Metric
- New vulnerabilities published in the National Vulnerability Database, last 12 months
- Solved if
- Fewer serious defects are found each year
- Signal score
- 0 / 100. Per git push: Up 23% since ChatGPT launched. How it is scored
- Status rule
- More reported when more vulnerabilities are published than in the 12 months before.
Update history
The reading on each date we checked, separate from the historical observations above.
| Date | Value | Year over year | Status |
|---|---|---|---|
| 2026-11-02 | 98,371 | +109% | More reported |
| 2026-11-01 | 98,371 | +109% | More reported |
Source
| Source | Role | Measures | Latest data |
|---|---|---|---|
| National Vulnerability Database | Scored measurement | Every published CVE | Nov 1, 2026 |