Vendor Security Activity Reports
Per-vendor CVE disclosure volume, severity composition, CISA KEV listings, and patch velocity. Every number sourced from NVD, CISA, MITRE cvelistV5, or a vendor advisory timestamp. No synthesized scores.
Generated Nov 2, 2026Cohort: 9 vendors with ≥10 CVE advisoriesMethodology ↗
| Vendor | CVEs | Crit+High | KEV rate |
|---|---|---|---|
| Microsoft | 33,305 | 53.8%(12,040) | 0.6%(138) |
| Ubuntu | 31,349 | 43.9%(5,998) | 0.3%(41) |
| Red Hat | 28,890 | 53.2%(5,591) | 0.4%(43) |
| Palo Alto Networks | 705 | 51.9%(180) | 4.6%(16) |
| GitLab | 658 | 28.6%(167) | 0.5%(3) |
| Cisco | 345 | 55.9%(193) | 4.3%(15) |
| AWS | 207 | 66.0%(136) | 2.4%(5) |
| Google Cloud | 110 | 66.4%(73) | 5.5%(6) |
| HashiCorp | 66 | 56.1%(37) | 0.0%(0) |