Vendor Security Activity Reports
Per-vendor CVE disclosure volume, severity composition, CISA KEV listings, and patch velocity. Every number sourced from NVD, CISA, MITRE cvelistV5, or a vendor advisory timestamp. No synthesized scores.
Generated Oct 17, 2026Cohort: 9 vendors with ≥10 CVE advisoriesMethodology ↗
| Vendor | CVEs | Crit+High | KEV rate |
|---|---|---|---|
| Microsoft | 31,763 | 54.5%(11,398) | 0.7%(135) |
| Ubuntu | 30,431 | 43.9%(5,780) | 0.3%(39) |
| Red Hat | 28,198 | 52.1%(5,148) | 0.4%(39) |
| Palo Alto Networks | 702 | 51.6%(178) | 3.8%(13) |
| GitLab | 645 | 28.1%(161) | 0.3%(2) |
| Cisco | 345 | 55.9%(193) | 4.3%(15) |
| AWS | 183 | 65.9%(120) | 1.1%(2) |
| Google Cloud | 105 | 65.7%(69) | 1.9%(2) |
| HashiCorp | 57 | 50.9%(29) | 0.0%(0) |