Vendor Security Activity Reports
Per-vendor CVE disclosure volume, severity composition, CISA KEV listings, and patch velocity. Every number sourced from NVD, CISA, MITRE cvelistV5, or a vendor advisory timestamp. No synthesized scores.
Generated Nov 13, 2026Cohort: 9 vendors with ≥10 CVE advisoriesMethodology ↗
| Vendor | CVEs | Crit+High | KEV rate |
|---|---|---|---|
| Microsoft | 34,847 | 54.9%(13,091) | 0.6%(140) |
| Ubuntu | 31,730 | 45.2%(6,329) | 0.3%(42) |
| Red Hat | 29,484 | 53.8%(5,947) | 0.4%(44) |
| Palo Alto Networks | 714 | 50.7%(180) | 4.5%(16) |
| GitLab | 660 | 28.3%(164) | 0.5%(3) |
| Cisco | 388 | 57.5%(223) | 5.4%(21) |
| AWS | 231 | 66.5%(153) | 2.2%(5) |
| Google Cloud | 125 | 63.2%(79) | 5.6%(7) |
| HashiCorp | 66 | 56.1%(37) | 0.0%(0) |