Skip to content
All lab projects

CVE Landscape

The last 30 days of scored CVEs, colored by severity or by what is actually being exploited.

12,738 CVEs, 22 on the CISA KEV list

Written about this: A failed deploy, a critical CVE, and the upgrades I kept putting offHow 14 CVEs finally forced my Next.js upgrade (and what the migration actually looked like)

The window at a glance

12,738 scored CVEs published in the last 30 days, of which 22 appear on the CISA Known Exploited Vulnerabilities catalog. The last pipeline run added 403 records and saw 0 added to KEV. Data generated 2026-10-08.

By severity

  • CRITICAL1,370
  • HIGH5,874
  • MEDIUM4,912
  • LOW582

Busiest vendors

  • microsoft987
  • google738
  • oracle281
  • apple246
  • adobe185
  • ibm159
  • dell129
  • mozilla118
  • apache104
  • mongodb54
  • accellion51
  • snipeitapp46

8,791 of 12,738 have no vendor attributed in NVD yet.

Loading the interactive treemap...