Trends

How many vulnerabilities CISA confirms as exploited each month, how fast flaws get exploited after disclosure, the most exploited vendors and daily CVE volume.

39 vulnerabilities added to CISA's Known Exploited Vulnerabilities catalog in the last 30 days (34 in the 30 days before); median of 15 days from publication to exploitation over the last 12 months; 2394 new CVEs in the last 7 days.

Most exploited vendors, last 12 months

• Microsoft: 49
• Cisco: 19
• Google: 13
• Fortinet: 11
• Apple: 11
• Linux: 9
• Adobe: 8
• Oracle: 7
• Citrix: 6
• Zimbra: 6