Threat observatory

Overview

An aggregate view of the database: trends, severity, exploitation probability and the most exposed technologies.

373,513 CVEs · updated daily
total CVEs
0
Criticals
0
KEV
0
YoY growth
+51.6%
🌐 Volume & trends
New CVEs per year
18
19
20
21
22
23
24
25
26
Top vendors
Linux13,540Microsoft9,306Oracle Corporation6,268Google5,644IBM4,896Adobe4,597
Top weakness types (CWE)
Cross-site Scripting (XSS)7.2%SQL Injection3.2%Missing Authorization2%CSRF1.6%Improper Access Control1.4%Path Traversal1.4%
⚡ Severity & exploitation
Global CVSS distribution
Critical 10.3%
High 37.8%
Medium 47.5%
Public PoC rate
8.5%
31,602 CVEs
High EPSS (≥50%)
4,311
EPSS ≥ 50%
Median time to exploit
17.3 days
publication → first PoC
🛡️ Attack complexity
No user interaction69.5%
No/low privileges89%
Low complexity (AC:L)88.2%
🛡️ Defense availability
With referenced fix
2.6%
9,641 CVEs · patch/mitigation reference
Recent CVEs in end-of-life software
5.4%
139 / 2,578 · last 24 months · among mappable
fontes: NVD · EPSS (FIRST) · CISA KEV · PoC-in-GitHub · Exploit-DB