Known exploited vulnerabilities by vendor
Every vendor with 5 or more CVEs in CISA's Known Exploited Vulnerabilities catalog, with how many were added in the last 12 months and how many are used in ransomware.
| Vendor | KEV CVEs | Last 12 months | Ransomware | Latest added |
|---|---|---|---|---|
| Microsoft | 391 | 43 | 117 | 2026-11-10 |
| Cisco | 103 | 22 | 7 | 2026-11-10 |
| Apple | 96 | 11 | 0 | 2026-11-04 |
| Adobe | 83 | 7 | 11 | 2026-10-27 |
| 77 | 12 | 0 | 2026-11-10 | |
| Oracle | 46 | 5 | 13 | 2026-08-24 |
| Apache | 41 | 3 | 8 | 2026-10-08 |
| Ivanti | 38 | 8 | 12 | 2026-10-30 |
| Linux | 32 | 9 | 2 | 2026-10-28 |
| Fortinet | 32 | 12 | 14 | 2026-10-16 |
| Citrix | 27 | 6 | 7 | 2026-10-04 |
| D-Link | 26 | 2 | 2 | 2026-04-24 |
| VMware | 26 | 0 | 9 | 2025-03-04 |
| SonicWall | 20 | 6 | 13 | 2026-11-06 |
| Synacor | 19 | 5 | 6 | 2026-08-21 |
| Android | 17 | 3 | 0 | 2026-06-02 |
| Palo Alto Networks | 16 | 3 | 6 | 2026-10-14 |
| Samsung | 15 | 1 | 0 | 2026-04-24 |
| Atlassian | 14 | 1 | 8 | 2026-10-15 |
| SAP | 14 | 0 | 3 | 2025-05-15 |
| Zyxel | 13 | 1 | 2 | 2026-09-21 |
| Mozilla | 13 | 0 | 1 | 2025-10-06 |
| Trend Micro | 12 | 1 | 0 | 2026-05-21 |
| Qualcomm | 12 | 1 | 0 | 2026-03-03 |
| SolarWinds | 11 | 4 | 2 | 2026-06-05 |
| Roundcube | 11 | 2 | 0 | 2026-02-20 |
| QNAP | 11 | 0 | 9 | 2023-12-21 |
| IBM | 9 | 2 | 2 | 2026-11-09 |
| Red Hat | 9 | 2 | 4 | 2026-08-26 |
| Progress | 9 | 1 | 4 | 2026-08-07 |
| Arm | 9 | 0 | 0 | 2024-06-12 |
| Zoho | 9 | 0 | 2 | 2023-03-07 |
| F5 | 8 | 2 | 4 | 2026-09-22 |
| Juniper | 8 | 0 | 0 | 2025-10-02 |
| NETGEAR | 8 | 0 | 0 | 2022-09-08 |
| WordPress | 7 | 4 | 0 | 2026-11-03 |
| Mitel | 7 | 0 | 5 | 2025-02-12 |
| Sophos | 7 | 0 | 2 | 2025-02-06 |
| GitLab | 6 | 4 | 1 | 2026-10-29 |
| Broadcom | 6 | 4 | 1 | 2026-10-28 |
| Jenkins | 6 | 0 | 1 | 2025-10-02 |
| TP-Link | 6 | 0 | 0 | 2025-09-03 |
| Plex | 5 | 4 | 0 | 2026-10-20 |
| MikroTik | 5 | 3 | 0 | 2026-09-25 |
| Check Point | 5 | 4 | 2 | 2026-09-22 |
| N-able | 5 | 3 | 0 | 2026-09-08 |
| PaperCut | 5 | 3 | 2 | 2026-08-31 |
| Langflow | 5 | 4 | 1 | 2026-07-21 |
| Drupal | 5 | 1 | 2 | 2026-05-22 |
| GNU | 5 | 1 | 0 | 2026-01-26 |
| RARLAB | 5 | 1 | 4 | 2025-12-09 |
| DrayTek | 5 | 0 | 0 | 2025-05-15 |
| Exim | 5 | 0 | 1 | 2022-03-25 |