Vendor scorecards

Which vendors are exploited most? CISA KEV vendor scorecards

Gociux · generated from CISA KEV and the CVE list

In the last 12 months the vendors with the most vulnerabilities newly confirmed as exploited were Microsoft (42), Cisco (22), Google (12), Fortinet (12), Apple (11). The table covers all 145 vendors with at least two entries in CISA's Known Exploited Vulnerabilities catalog.

Counts are additions to CISA KEV. "Pub → KEV" is the median days from CVE publication to KEV listing for entries added in the last 24 months. Use with context: big install bases attract attackers. For supplier reviews under NIS2 or DORA, see our supplier security work.