Stats
CVEs
95,446
↑ 107% vs previous 12 months
Critical
10,118
↑ 155% vs previous 12 months
Added to CISA KEV
302
↑ 25% vs previous 12 months
Per day
284
was 126
CVEs per month · last 12 months
CriticalHighMediumLowNot scored1 dot = 200 CVEs
Dec
Jan
Feb
Mar
Apr
May
Jun
Jul
Aug
Sep
Oct
Nov
Most affected vendors
9,256↑ 86%4,558↑ 258%4,234↑ 703%4,155↑ 1219%1,554↑ 145%1,288↑ 499%1,246↑ 73%Most common weaknesses
Cross-site scripting CWE-798,716
Missing authorization CWE-8625,309
Improper access control CWE-2844,588
SQL injection CWE-894,330
Use after free CWE-4163,245
Path traversal CWE-223,105
How fast it moves
Fix listed
51%
of CVEs in this period
Disclosure to Exploit-DB
53 days
median
Disclosure to CISA KEV
14 days
median
In KEV by disclosure day
62
exploited before or at disclosure