Chronotaxis of the Popes
- 2026Vacant see · This year's Pope will be elected in December by the Conclave.
- 2025Pope CitrixBleed II · Cardinals: ToolShell, WorstFit
- 2024Pope Xzorcist I · Cardinals: regreSSHion, ConnectAround
- 2023Pope CitrixBleed I · Cardinals: Rapid Reset, Looney Tunables
- 2022Pope Follina I · Cardinals: Spring4Shell, ProxyNotShell, PwnKit
- 2021Pope Log4Shell I · Cardinals: ProxyLogon, PrintNightmare
- 2020Pope Zerologon I · Cardinals: SIGRed, Ghostcat
- 2019Pope BlueKeep I · Cardinals: Shitrix
- 2018Pope Meltdown I · Cardinals: Spectre, Foreshadow
- 2017Pope EternalBlue I · Cardinals: KRACK, EFAIL
- 2016Pope Dirty COW I · Cardinals: DROWN, Badlock
- 2015Pope Stagefright I · Cardinals: FREAK, Logjam, VENOM
- 2014Pope Heartbleed I · Cardinals: Shellshock (Bashdoor), POODLE
- 2013Pope Dual_EC I · Cardinals: Lucky Thirteen (TLS CBC timing attack), Android 'Master Key' APK signature bypass (Bluebox)
- 2012Pope Flame I · Cardinals: CRIME (TLS/SPDY compression side channel), RDP remote code execution (MS12-020), wormable with a leaked PoC
- 2011Pope BEAST I · Cardinals: Hash-collision DoS (HashDoS, n.runs at 28C3), Win32k TrueType font parsing zero-day (Duqu)
- 2010Pope Stuxnet I · Cardinals: Internet Explorer use-after-free (Operation Aurora), ASP.NET padding oracle (Rizzo & Duong)
- 2009Pope Renegotiation I · Cardinals: SMBv2 srv2.sys negotiate overflow (MS09-050)
- 2008Pope Kaminsky I · Cardinals: Windows Server service RPC overflow (MS08-067, Conficker), Debian OpenSSL predictable PRNG (weak keys)
- 2007Pope ANI I · Cardinals: Windows DNS Server RPC overflow (MS07-029), exploited as a zero-day
- 2006Pope Netapi I · Cardinals: IE VML vgx.dll zero-day (MS06-055), Bleichenbacher RSA e=3 signature forgery
- 2005Pope WMF I · Cardinals: Windows Plug and Play overflow (MS05-039, Zotob), Cisco IOS IPv6 exploitation (Michael Lynn, 'Ciscogate')
- 2004Pope Sasser I · Cardinals: Microsoft ASN.1 library integer overflows (MS04-007), GDI+ JPEG parsing overflow (MS04-028)
- 2003Pope Blaster I · Cardinals: WebDAV / ntdll.dll overflow in IIS 5 (MS03-007), exploited as a zero-day, Sendmail crackaddr header overflow
- 2002Pope Slammer I · Cardinals: OpenSSL SSLv2 client master key overflow (Slapper worm), Apache chunked-encoding overflow
- 2001Pope Code Red I · Cardinals: BIND 8 TSIG buffer overflow (Lion worm), IE incorrect MIME header auto-execution (MS01-020, Nimda/Klez)
- 2000Pope Unicode I · Cardinals: wu-ftpd SITE EXEC format string (Ramen worm)
- 1999Pope MDAC I · Cardinals: Scriptlet.typelib / Eyedog ActiveX 'safe for scripting' (MS99-032, BubbleBoy/KAK), BIND 8.2 NXT record overflow