Vendor Security Activity Reports
Per-vendor CVE disclosure volume, severity composition, CISA KEV listings, and patch velocity. Every number sourced from NVD, CISA, MITRE cvelistV5, or a vendor advisory timestamp. No synthesized scores.
Generated Sep 19, 2026Cohort: 9 vendors with ≥10 CVE advisoriesMethodology ↗
| Vendor | CVEs | Crit+High | KEV rate |
|---|---|---|---|
| Ubuntu | 29,031 | 41.1%(4,888) | 0.4%(44) |
| Red Hat | 26,844 | 49.9%(4,323) | 0.5%(41) |
| Microsoft | 26,833 | 55.3%(9,404) | 0.8%(139) |
| GitLab | 608 | 28.3%(156) | 0.5%(3) |
| Cisco | 309 | 53.1%(164) | 4.5%(14) |
| AWS | 171 | 67.7%(115) | 1.2%(2) |
| Google Cloud | 87 | 64.4%(56) | 2.3%(2) |
| Palo Alto Networks | 65 | 58.5%(38) | 3.1%(2) |
| HashiCorp | 52 | 51.9%(27) | 0.0%(0) |