Vendor Security Activity Reports
Per-vendor CVE disclosure volume, severity composition, CISA KEV listings, and patch velocity. Every number sourced from NVD, CISA, MITRE cvelistV5, or a vendor advisory timestamp. No synthesized scores.
Generated Sep 2, 2026Cohort: 9 vendors with ≥10 CVE advisoriesMethodology ↗
| Vendor | CVEs | Crit+High | KEV rate |
|---|---|---|---|
| Ubuntu | 28,203 | 39.4%(4,379) | 0.4%(41) |
| Red Hat | 26,423 | 48.6%(4,034) | 0.5%(39) |
| Microsoft | 24,823 | 53.8%(8,130) | 0.9%(136) |
| GitLab | 591 | 27.6%(148) | 0.4%(2) |
| Cisco | 211 | 46.5%(98) | 5.2%(11) |
| AWS | 147 | 67.3%(99) | 1.4%(2) |
| Google Cloud | 86 | 64.0%(55) | 2.3%(2) |
| Palo Alto Networks | 56 | 55.4%(31) | 3.6%(2) |
| HashiCorp | 46 | 52.2%(24) | 0.0%(0) |