Statistics
An overview of the vulnerability corpus — severity, volume over time, and the vendors with the greatest exposure.
343,895
Total CVEs
1,627
CISA KEV
327
Ransomware
4,271
High EPSS
0
SSVC: Act
171,738
Scored
Severity distribution
CRITICAL
17,225
HIGH
62,678
MEDIUM
83,982
LOW
7,755
UNRATED
172,157
NONE
93
Vulnerabilities by year
99
00
01
02
03
04
05
06
07
08
09
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
Most affected vendors
Ranked by weighted impact across published vulnerabilities.
| Vendor | CVEs | KEV | Weighted impact |
|---|---|---|---|
| Microsoft | 11485 | 274 | 52780.9 |
| ibm | 6056 | 5 | 24574.2 |
| Adobe | 5177 | 36 | 24216.5 |
| 5400 | 80 | 23081.8 | |
| Linux | 13520 | 10 | 21523.6 |
| Cisco | 4260 | 56 | 21101.2 |
| Oracle Corporation | 4857 | 25 | 18793.2 |
| Unknown | 4443 | 1 | 16110.3 |
| Apple | 5637 | 87 | 14525.5 |
| Qualcomm, Inc. | 2933 | 12 | 10329.6 |