Vendor Security Activity Reports
Per-vendor CVE disclosure volume, severity composition, CISA KEV listings, and patch velocity. Every number sourced from NVD, CISA, MITRE cvelistV5, or a vendor advisory timestamp. No synthesized scores.
Generated Jul 29, 2026Cohort: 9 vendors with ≥10 CVE advisoriesMethodology ↗
| Vendor | CVEs | Crit+High | KEV rate |
|---|---|---|---|
| Ubuntu | 26,827 | 35.5%(3,511) | 0.4%(42) |
| Red Hat | 25,613 | 44.3%(3,375) | 0.5%(37) |
| Microsoft | 23,162 | 52.6%(7,190) | 1.0%(133) |
| GitLab | 558 | 27.0%(143) | 0.4%(2) |
| Cisco | 164 | 39.0%(64) | 5.5%(9) |
| AWS | 113 | 62.8%(71) | 1.8%(2) |
| Google Cloud | 69 | 62.3%(43) | 1.4%(1) |
| Palo Alto Networks | 46 | 65.2%(30) | 4.3%(2) |
| HashiCorp | 30 | 60.0%(18) | 0.0%(0) |