Bitcoin Core
Vendor:
First CVE: Aug 6, 2012 · Active for 13 years
54
Total CVEs
More Total CVEs than 98% of tracked products
5.4
Avg CVEs / Year
Higher CVE frequency than 89% of tracked products
6.4
Avg CVSS
Higher Avg CVSS than 27% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Bitcoin Core over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 6, 2012
13 years ago
Most Recent CVE
Mar 20, 2026
126 days ago
CVE Severity & Scoring
Bitcoin Core54 CVEs
52%
48%
All CVEs352,231 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local1 (1.9%)
Network29 (53.7%)
Unknown22 (40.7%)
Physical0 (0.0%)
Adjacent Network2 (3.7%)
Attack Complexity
Low31 (57.4%)
High1 (1.9%)
Unknown22 (40.7%)
User Interaction
None32 (59.3%)
Unknown22 (40.7%)
Required0 (0.0%)
Privileges Required
Low1 (1.9%)
High0 (0.0%)
None31 (57.4%)
Unknown22 (40.7%)
Top CVEs
Signals from CVEs in this product scope (54 CVEs).
54 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2018-17144HIGH Bitcoin Core 0.14.x before 0.14.3, 0.15.x before 0.15.2, and 0.16.x before 0.16.3 and Bitcoin Knots 0.14.x through 0.16.x before 0.16.3 allow a remote denial of service (applicatio | Sep 19, 2018 | 7.5 | 35 | NO | NO |
CVE-2010-5139HIGH Integer overflow in wxBitcoin and bitcoind before 0.3.11 allows remote attackers to bypass intended economic restrictions and create many bitcoins via a crafted Bitcoin transaction | Aug 6, 2012 | 7.5 | 32 | NO | NO |
CVE-2017-12842HIGH Bitcoin Core before 0.14 allows an attacker to create an ostensibly valid SPV proof for a payment to a victim who uses an SPV wallet, even if that payment did not actually occur. C | Mar 16, 2020 | 7.5 | 27 | NO | NO |
CVE-2013-3220MEDIUM bitcoind and Bitcoin-Qt before 0.4.9rc2, 0.5.x before 0.5.8rc2, 0.6.x before 0.6.5rc2, and 0.7.x before 0.7.3rc2, and wxBitcoin, do not properly consider whether a block's size cou | Aug 2, 2013 | 6.4 | 27 | NO | NO |
CVE-2018-17145HIGH Bitcoin Core 0.16.x before 0.16.2 and Bitcoin Knots 0.16.x before 0.16.2 allow remote denial of service via a flood of multiple transaction inv messages with random hashes, aka INV | Sep 10, 2020 | 7.5 | 26 | NO | NO |
CVE-2013-2292HIGH bitcoind and Bitcoin-Qt 0.8.0 and earlier allow remote attackers to cause a denial of service (electricity consumption) by mining a block to create a nonstandard Bitcoin transactio | Mar 12, 2013 | 7.8 | 26 | NO | NO |
CVE-2025-46597HIGH Bitcoin Core 0.13.0 through 29.x has an integer overflow. | Mar 20, 2026 | 7.5 | 25 | NO | NO |
CVE-2024-35202HIGH Bitcoin Core before 25.0 allows remote attackers to cause a denial of service (blocktxn message-handling assertion and node exit) by including transactions in a blocktxn message th | Oct 10, 2024 | 7.5 | 25 | NO | NO |
CVE-2023-33297HIGH Bitcoin Core before 24.1, when debug mode is not used, allows attackers to cause a denial of service (e.g., CPU consumption) because draining the inventory-to-send queue is ineffic | May 22, 2023 | 7.5 | 25 | NO | NO |
CVE-2020-14198HIGH Bitcoin Core 0.20.0 allows remote denial of service. | Sep 10, 2020 | 7.5 | 25 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (54 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (54 CVEs).
Media Mentions
Signals from CVEs in this product scope (54 CVEs).
Top CNAs Publishing CVEs For Bitcoin Core
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 22.0 | 1 | 7.5 | 0.6% | 0 | 0 |
| 0.8.1 | 3 | 4.8 | 2.1% | 0 | 0 |
| 0.8.0 | 3 | 5.0 | 2.0% | 0 | 0 |
| 0.6.2 | 7 | 6.0 | 2.3% | 0 | 0 |
| 0.6.1 | 7 | 6.0 | 2.3% | 0 | 0 |
| 0.6.0.8 | 7 | 6.0 | 2.3% | 0 | 0 |
| 0.6.0.7 | 7 | 6.0 | 2.3% | 0 | 0 |
| 0.6.0.6 | 7 | 6.0 | 2.3% | 0 | 0 |
| 0.6.0.5 | 7 | 6.0 | 2.3% | 0 | 0 |
| 0.6.0.4 | 7 | 6.0 | 2.3% | 0 | 0 |
| 0.6.0.3 | 7 | 6.0 | 2.3% | 0 | 0 |
| 0.6.0.2 | 7 | 6.0 | 2.3% | 0 | 0 |
| 0.6.0.1 | 7 | 6.0 | 2.3% | 0 | 0 |
| 0.6.0 | 1 | 7.5 | 4.5% | 0 | 0 |
| 0.5.6 | 7 | 6.0 | 2.3% | 0 | 0 |
| 0.5.5 | 7 | 6.0 | 2.3% | 0 | 0 |
| 0.5.4 | 7 | 6.0 | 2.3% | 0 | 0 |
| 0.5.3.1 | 7 | 6.0 | 2.3% | 0 | 0 |
| 0.5.3 | 7 | 6.0 | 2.3% | 0 | 0 |
| 0.5.2 | 1 | 7.5 | 4.5% | 0 | 0 |