Threat observatory

Overview

An aggregate view of the database: trends, severity, exploitation probability and the most exposed technologies.

397,464 CVEs · updated daily
total CVEs
0
Criticals
0
KEV
0
YoY growth
+80.2%
🌐 Volume & trends
New CVEs per year
18
19
20
21
22
23
24
25
26
Top vendors
Linux16,905Microsoft10,761Oracle Corporation7,792Google6,561IBM5,644Unknown5,430
Top weakness types (CWE)
Cross-site Scripting (XSS)7.2%SQL Injection3.2%Missing Authorization2.1%Improper Access Control1.8%CSRF1.5%Path Traversal1.5%
⚡ Severity & exploitation
Global CVSS distribution
Critical 10.6%
High 38.6%
Medium 46.4%
Public PoC rate
8.6%
34,340 CVEs
High EPSS (≥50%)
4,304
EPSS ≥ 50%
Median time to exploit
15.9 days
publication → first PoC
🛡️ Attack complexity
No user interaction70.5%
No/low privileges89.3%
Low complexity (AC:L)88%
🛡️ Defense availability
With referenced fix
3.6%
14,499 CVEs · patch/mitigation reference
Recent CVEs in end-of-life software
3.7%
128 / 3,491 · last 24 months · among mappable