Research
Statistics
Comprehensive overview of known exploited vulnerabilities and their characteristics — catalog growth, Beyond CISA KEV coverage, sensor telemetry, and enrichment distributions.
- Total KEVs
- 2,795
- Known exploited vulnerabilities tracked
- KEVs (Last 30 Days)
- 324
- Recently added to Previdian
- CISA KEVs
- 1,687
- Also listed in the official catalog
- Beyond CISA KEV
- 1,108
- Additional exploited vulnerabilities beyond CISA
- Total Tags
- 31
- Tags applied across the catalog
- Total Vendors
- 910
- Distinct affected vendors
Weekly
Intelligence Highlights
Rolling last 7 days by KEV added date. “Ahead of CISA” is by CISA listing date and uses operational sources only (excludes CVE metadata ingest). Sensor counts reflect observed exploitation attempts in the honeypot and sensor network (90-day aggregate history; lifetime first/last observed preserved).
Last 7 Days
- 24
- New KEVs
- 14
- Beyond CISA KEV
- 10
- In CISA
- 3
- Ahead of CISA
- 136h
- Avg Faster
- 96h
- Median Faster
Sensor Telemetry
- 162
- KEVs in Sensors
- 113
- Active (7d)
- 76,590
- Exploitation Events (7d)
- 877
- Unique Attackers (7d)
Ahead of CISA This Week
| CVE | Vendor / Product | Lead |
|---|---|---|
| CVE-2026-8452 | NetScaler / ADC, Gateway | Recorded 9 days before CISA KEV |
| CVE-2026-81578 | PaperCut / PaperCut MF/NG | Recorded 4 days before CISA KEV |
| CVE-2026-82078 | PaperCut / PaperCut MF/NG | Recorded 4 days before CISA KEV |
Trends
Trends
Catalog growth over time and by year added.
KEVs Over Time (Last 12 Months)
KEVs by Year Added
Note: CISA KEV launched on November 3rd, 2021. Previdian launched on April 30th, 2025.
Tags
KEVs by Tag
Distribution
Table
| Tag | KEV Count |
|---|---|
| cisa | 1687 |
| nuclei_scanner | 1240 |
| windows | 435 |
| metasploit | 420 |
| nessus_scanner | 368 |
| malware | 328 |
| microsoft | 327 |
| edge | 292 |
| ransomware | 261 |
| ios | 179 |
| php | 146 |
| macos | 97 |
| linux | 96 |
| java | 90 |
| wordpress | 73 |
| apache | 69 |
| android | 49 |
| dotnet | 29 |
| joomla | 12 |
| python | 8 |
| elasticsearch | 5 |
| drupal | 5 |
| nodejs | 3 |
| redis | 3 |
| ruby | 3 |
| magento | 2 |
| postgresql | 2 |
| mysql | 2 |
| qilin ransomware | 2 |
| mongodb | 1 |
Vendors
Distribution
Top 10 Vendors by KEV Count
Top 10 Vendors with Edge KEVs
Vendors with the most KEVs tagged as 'edge' (edge computing, edge devices, etc.)
Severity
CVSS Score Distribution
Each chart shows the distribution of CVSS scores for all KEVs. Only KEVs with a score for that version are included in the chart.
CVSS v4.0
CVSS v3.0
CVSS v2.0
EPSS
EPSS Analysis
EPSS Score Distribution (Last 30 Days)
Top 10 KEVs by EPSS Score
Activity
CVE Analysis
Top 10 KEVs by News Mentions
Based on mentions in security news articles and advisories
Top 10 KEVs by Proof of Concepts
Based on publicly available unverified proof of concept exploits
Timing
Exploitation Analysis
Time Between CVE Publication and KEV Listing
Note: This shows the time between CVE publication and KEV listing, not necessarily when exploitation began