StatisticsComputed from the published record
The record in numbers
Severity, volume, exploitation and the most affected vendors, products and weakness types. Every figure is counted from the same verified records the explorer shows.
StatisticsComputed from the published record
Severity, volume, exploitation and the most affected vendors, products and weakness types. Every figure is counted from the same verified records the explorer shows.
Daily collection began Monday, 2 November 2026. Earlier dates hold only vulnerabilities that CISA later listed as exploited, so long ranges undercount the past.
Counts use the publication date at the source and Stockholm calendar days. Withdrawn and rejected records are excluded. Figures refresh after each morning run; nothing on this page is estimated or written by AI. Read the methodology.
New vulnerabilities by severity over the last 52 weeks, Monday to Sunday.
| Week of | Critical | High | Medium | Low | Unrated | Exploited | Total |
|---|---|---|---|---|---|---|---|
| 9 Nov 2026 | 4 | 9 | 16 | 1 | 0 | 0 | 30 |
| 2 Nov 2026 | 301 | 1,156 | 1,362 | 184 | 321 | 2 | 3,324 |
| 26 Oct 2026 | 0 | 7 | 2 | 0 | 0 | 2 | 9 |
| 19 Oct 2026 | 3 | 2 | 1 | 2 | 0 | 4 | 8 |
| 12 Oct 2026 | 4 | 5 | 2 | 3 | 0 | 10 | 14 |
| 5 Oct 2026 | 0 | 1 | 0 | 0 | 0 | 1 | 1 |
| 28 Sept 2026 | 1 | 1 | 0 | 0 | 0 | 2 | 2 |
| 21 Sept 2026 | 0 | 1 | 3 | 0 | 0 | 4 | 4 |
| 14 Sept 2026 | 0 | 0 | 1 | 0 | 0 | 0 | 1 |
| 7 Sept 2026 | 0 | 1 | 1 | 0 | 0 | 0 | 2 |
| 31 Aug 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 24 Aug 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 17 Aug 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 10 Aug 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 3 Aug 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 27 Jul 2026 | 0 | 0 | 0 | 1 | 0 | 1 | 1 |
| 20 Jul 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 13 Jul 2026 | 1 | 0 | 0 | 0 | 0 | 1 | 1 |
| 6 Jul 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 29 Jun 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 22 Jun 2026 | 0 | 1 | 0 | 0 | 1 | 0 | 2 |
| 15 Jun 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 8 Jun 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 1 Jun 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 25 May 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 18 May 2026 | 0 | 1 | 0 | 0 | 0 | 1 | 1 |
| 11 May 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 4 May 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 27 Apr 2026 | 0 | 2 | 0 | 0 | 0 | 0 | 2 |
| 20 Apr 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 13 Apr 2026 | 0 | 0 | 1 | 0 | 0 | 1 | 1 |
| 6 Apr 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 30 Mar 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 23 Mar 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 16 Mar 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 9 Mar 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2 Mar 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 23 Feb 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 16 Feb 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 9 Feb 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2 Feb 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 26 Jan 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 19 Jan 2026 | 0 | 0 | 1 | 0 | 1 | 0 | 2 |
| 12 Jan 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 5 Jan 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 29 Dec 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 22 Dec 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 15 Dec 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 8 Dec 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 1 Dec 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 24 Nov 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| 17 Nov 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
One light per Stockholm calendar day: the brighter, the more vulnerabilities were published. This view ignores the range above.
| Week of | Mon | Tue | Wed | Thu | Fri | Sat | Sun | Total |
|---|---|---|---|---|---|---|---|---|
| 9 Nov 2026 | 30 | — | — | — | — | — | — | 30 |
| 2 Nov 2026 | 393 | 686 | 456 | 524 | 473 | 483 | 309 | 3,324 |
| 26 Oct 2026 | — | 2 | 1 | 2 | 3 | 1 | — | 9 |
| 19 Oct 2026 | 4 | — | 2 | 2 | — | — | — | 8 |
| 12 Oct 2026 | — | 3 | 8 | 3 | — | — | — | 14 |
| 5 Oct 2026 | — | 1 | — | — | — | — | — | 1 |
| 28 Sept 2026 | — | — | — | — | — | — | 2 | 2 |
| 21 Sept 2026 | — | — | 4 | — | — | — | — | 4 |
| 14 Sept 2026 | 1 | — | — | — | — | — | — | 1 |
| 7 Sept 2026 | — | — | — | 2 | — | — | — | 2 |
| 31 Aug 2026 | — | — | — | — | — | — | — | 0 |
| 24 Aug 2026 | — | — | — | — | — | — | — | 0 |
| 17 Aug 2026 | — | — | — | — | — | — | — | 0 |
| 10 Aug 2026 | — | — | — | — | — | — | — | 0 |
| 3 Aug 2026 | — | — | — | — | — | — | — | 0 |
| 27 Jul 2026 | — | — | — | 1 | — | — | — | 1 |
| 20 Jul 2026 | — | — | — | — | — | — | — | 0 |
| 13 Jul 2026 | — | 1 | — | — | — | — | — | 1 |
| 6 Jul 2026 | — | — | — | — | — | — | — | 0 |
| 29 Jun 2026 | — | — | — | — | — | — | — | 0 |
| 22 Jun 2026 | — | — | — | — | 2 | — | — | 2 |
| 15 Jun 2026 | — | — | — | — | — | — | — | 0 |
| 8 Jun 2026 | — | — | — | — | — | — | — | 0 |
| 1 Jun 2026 | — | — | — | — | — | — | — | 0 |
| 25 May 2026 | — | — | — | — | — | — | — | 0 |
| 18 May 2026 | — | — | — | — | — | 1 | — | 1 |
| 11 May 2026 | — | — | — | — | — | — | — | 0 |
| 4 May 2026 | — | — | — | — | — | — | — | 0 |
| 27 Apr 2026 | — | — | — | — | 2 | — | — | 2 |
| 20 Apr 2026 | — | — | — | — | — | — | — | 0 |
| 13 Apr 2026 | — | 1 | — | — | — | — | — | 1 |
| 6 Apr 2026 | — | — | — | — | — | — | — | 0 |
| 30 Mar 2026 | — | — | — | — | — | — | — | 0 |
| 23 Mar 2026 | — | — | — | — | — | — | — | 0 |
| 16 Mar 2026 | — | — | — | — | — | — | — | 0 |
| 9 Mar 2026 | — | — | — | — | — | — | — | 0 |
| 2 Mar 2026 | — | — | — | — | — | — | — | 0 |
| 23 Feb 2026 | — | — | — | — | — | — | — | 0 |
| 16 Feb 2026 | — | — | — | — | — | — | — | 0 |
| 9 Feb 2026 | — | — | — | — | — | — | — | 0 |
| 2 Feb 2026 | — | — | — | — | — | — | — | 0 |
| 26 Jan 2026 | — | — | — | — | — | — | — | 0 |
| 19 Jan 2026 | — | — | — | — | 2 | — | — | 2 |
| 12 Jan 2026 | — | — | — | — | — | — | — | 0 |
| 5 Jan 2026 | — | — | — | — | — | — | — | 0 |
| 29 Dec 2025 | — | — | — | — | — | — | — | 0 |
| 22 Dec 2025 | — | — | — | — | — | — | — | 0 |
| 15 Dec 2025 | — | — | — | — | — | — | — | 0 |
| 8 Dec 2025 | — | — | — | — | — | — | — | 0 |
| 1 Dec 2025 | — | — | — | — | — | — | — | 0 |
| 24 Nov 2025 | — | — | — | — | — | — | — | 0 |
| 17 Nov 2025 | — | — | — | — | — | — | — | 0 |
| 10 Nov 2025 | — | — | — | — | — | — | — | 0 |
Named in NVD and CISA KEV records. Red is the share confirmed as exploited.
Products from NVD and CISA KEV, packages from OSV and GitHub advisories.
Open-source registries named in OSV and GitHub advisories.
Root causes as classified by the sources with MITRE CWE. Each links to its definition.
3,082 scored vulnerabilities in one-point buckets, colored by qualitative band.
| Score | Band | Vulnerabilities |
|---|---|---|
| 0.0–0.9 | Low | 2 |
| 1.0–1.9 | Low | 4 |
| 2.0–2.9 | Low | 52 |
| 3.0–3.9 | Low | 134 |
| 4.0–4.9 | Medium | 309 |
| 5.0–5.9 | Medium | 522 |
| 6.0–6.9 | Medium | 558 |
| 7.0–7.9 | High | 624 |
| 8.0–8.9 | High | 563 |
| 9.0–10.0 | Critical | 314 |
Average base score
6.8
Over the 3,082 vulnerabilities with a CVSS score. 323 have none yet: sources often publish first and score later.
The score is the version 4.0, 3.1 or 3.0 base score the sources publish, NVD first. EPSS probabilities are shown on each vulnerability page.