sha256 41c8091ad62d508d6f8906ad5cd26b20efe551f7d51b95ecc8a6981fa640b4ea bytes 1850831 catalogVersion 2026.11.10 | dateReleased 2026-11-10T19:03:29.8375Z | count field 1779 | array length 1779 keys of first entry: cveID, vendorProject, product, vulnerabilityName, dateAdded, shortDescription, requiredAction, dueDate, knownRansomwareCampaignUse, forensicTriage, notes, cwes key presence: {"cveID":1779,"vendorProject":1779,"product":1779,"vulnerabilityName":1779,"dateAdded":1779,"shortDescription":1779,"requiredAction":1779,"dueDate":1779,"knownRansomwareCampaignUse":1779,"forensicTriage":1779,"notes":1779,"cwes":1779} unique cveIDs 1779 entries with malformed dateAdded/dueDate: 0 earliest dateAdded 2021-11-03 | latest dateAdded 2026-11-10 == Added per calendar year (dateAdded) == 2021 311 17.5% 2022 555 31.2% 2023 187 10.5% 2024 186 10.5% 2025 245 13.8% 2026 295 16.6% asOf 2026-11-13 added in 2026: 295 added in last 30 days (dateAdded >= asOf-29d, i.e. 30 calendar days incl. asOf): 34 added in last 90 days (dateAdded >= asOf-89d): 114 alt definition, dateAdded >= asOf-30d: 38 | dateAdded >= asOf-90d: 114 == Top 15 vendorProject (exact string) == distinct vendorProject values: 294 1 Microsoft 391 22.0% 2 Cisco 103 5.8% 3 Apple 96 5.4% 4 Adobe 83 4.7% 5 Google 77 4.3% 6 Oracle 46 2.6% 7 Apache 41 2.3% 8 Ivanti 38 2.1% 9 Fortinet 32 1.8% 10 Linux 32 1.8% 11 Citrix 27 1.5% 12 D-Link 26 1.5% 13 VMware 26 1.5% 14 SonicWall 20 1.1% 15 Synacor 19 1.1% 16 Android 17 1.0% 17 Palo Alto Networks 16 0.9% 18 Samsung 15 0.8% == knownRansomwareCampaignUse == "Unknown" 1418 79.7% "Known" 361 20.3% 2026 additions flagged Known: 27 of 295 == dueDate - dateAdded, days: overall (n=1779) == min 1 | median 21 | max 184 | mean 41.1 <=7 196 11.0% 8-14 294 16.5% 15-21 1025 57.6% >21 264 14.8% exact-value histogram (days:count): 21:1025 14:290 181:238 3:157 7:20 182:11 4:8 184:8 1:6 2:4 31:4 8:2 == dueDate - dateAdded, days: added in 2021 (n=311) == min 14 | median 181 | max 182 | mean 121.4 <=7 0 0.0% 8-14 111 35.7% 15-21 0 0.0% >21 200 64.3% exact-value histogram (days:count): 181:189 14:111 182:11 == dueDate - dateAdded, days: added in 2022 (n=555) == min 4 | median 21 | max 184 | mean 36.4 <=7 1 0.2% 8-14 88 15.9% 15-21 403 72.6% >21 63 11.4% exact-value histogram (days:count): 21:403 14:88 181:49 184:8 31:4 4:1 24:1 25:1 == dueDate - dateAdded, days: added in 2023 (n=187) == min 4 | median 21 | max 43 | mean 20.3 <=7 8 4.3% 8-14 1 0.5% 15-21 177 94.7% >21 1 0.5% exact-value histogram (days:count): 21:177 4:7 7:1 8:1 43:1 == dueDate - dateAdded, days: added in 2024 (n=186) == min 2 | median 21 | max 21 | mean 20.2 <=7 8 4.3% 8-14 3 1.6% 15-21 175 94.1% >21 0 0.0% exact-value histogram (days:count): 21:175 7:7 12:2 2:1 8:1 == dueDate - dateAdded, days: added in 2025 (n=245) == min 1 | median 21 | max 21 | mean 19.7 <=7 19 7.8% 8-14 0 0.0% 15-21 226 92.2% >21 0 0.0% exact-value histogram (days:count): 21:226 7:12 1:6 2:1 == dueDate - dateAdded, days: added in 2026 (n=295) == min 2 | median 3 | max 21 | mean 9.1 <=7 160 54.2% 8-14 91 30.8% 15-21 44 14.9% >21 0 0.0% exact-value histogram (days:count): 3:157 14:91 21:44 2:2 5:1 == 10 most recent entries (sort dateAdded desc, then cveID desc) == CVE-2026-20320 | Cisco | BroadWorks | 2026-11-10 | 2026-11-24 | Unknown CVE-2026-125350 | Google | Chromium | 2026-11-10 | 2026-11-24 | Unknown CVE-2026-124194 | Microsoft | Office | 2026-11-10 | 2026-11-24 | Unknown CVE-2026-116606 | Barracuda Networks | Barracuda Email Security Gateway (ESG) | 2026-11-10 | 2026-11-13 | Unknown CVE-2026-111793 | Openwave Messaging Limited | Webtop Media Transcoder | 2026-11-10 | 2026-11-24 | Unknown CVE-2026-111560 | Barracuda Networks | Multiple Products | 2026-11-10 | 2026-11-13 | Unknown CVE-2026-123218 | IBM | Aspera Faspex | 2026-11-09 | 2026-11-12 | Unknown CVE-2026-123158 | OpenBSD | OpenSSH | 2026-11-09 | 2026-11-12 | Unknown CVE-2026-116779 | SignalWire | FreeSwitch | 2026-11-09 | 2026-11-12 | Unknown CVE-2026-102895 | GPUStack | GPUStack | 2026-11-09 | 2026-11-12 | Unknown == Product groups (case-insensitive; rules as written) == Microsoft (vendorProject = Microsoft), all products => 391 (22.0%); ransomware Known 117; added 2026 41 Microsoft: product contains "Windows" => 178 (10.0%); ransomware Known 49; added 2026 15 Microsoft: product contains "Win32k" => 25 (1.4%); ransomware Known 11; added 2026 0 Microsoft: product contains "Office" => 32 (1.8%); ransomware Known 4; added 2026 5 Microsoft: product contains "Exchange" => 19 (1.1%); ransomware Known 14; added 2026 2 Microsoft: product contains "Outlook" => 2 (0.1%); ransomware Known 0; added 2026 0 Microsoft: product contains "Word" or "Excel" or "PowerPoint" => 11 (0.6%); ransomware Known 1; added 2026 0 Microsoft: product contains "SharePoint" => 16 (0.9%); ransomware Known 8; added 2026 8 Microsoft: product contains "Internet Explorer" => 40 (2.2%); ransomware Known 8; added 2026 2 Microsoft: product contains "Edge" => 5 (0.3%); ransomware Known 2; added 2026 0 Microsoft: product contains "Defender" => 5 (0.3%); ransomware Known 2; added 2026 3 Microsoft: product contains "Teams" => 0 (0.0%); ransomware Known 0; added 2026 0 Microsoft: product contains "Entra" or "Azure" => 0 (0.0%); ransomware Known 0; added 2026 0 Fortinet (vendorProject = Fortinet) => 32 (1.8%); ransomware Known 14; added 2026 9 Ivanti (vendorProject = Ivanti) => 38 (2.1%); ransomware Known 12; added 2026 8 Ivanti or Pulse Secure or MobileIron (vendorProject contains) => 39 (2.2%); ransomware Known 12; added 2026 8 Cisco (vendorProject = Cisco) => 103 (5.8%); ransomware Known 7; added 2026 21 SonicWall (vendorProject = SonicWall) => 20 (1.1%); ransomware Known 13; added 2026 5 Citrix (vendorProject = Citrix) => 27 (1.5%); ransomware Known 7; added 2026 6 VMware (vendorProject = VMware) => 26 (1.5%); ransomware Known 9; added 2026 0 VMware or Broadcom (vendorProject contains) => 35 (2.0%); ransomware Known 11; added 2026 4 Apple (vendorProject = Apple) => 96 (5.4%); ransomware Known 0; added 2026 10 Google (vendorProject = Google), all products => 77 (4.3%); ransomware Known 0; added 2026 10 Google: product contains "Chromium" => 66 (3.7%); ransomware Known 0; added 2026 6 Google: product contains "Chrome" => 6 (0.3%); ransomware Known 0; added 2026 0 Adobe (vendorProject = Adobe) => 83 (4.7%); ransomware Known 11; added 2026 7 ConnectWise (vendorProject = ConnectWise) => 4 (0.2%); ransomware Known 2; added 2026 2 Kaseya (vendorProject = Kaseya) => 3 (0.2%); ransomware Known 3; added 2026 0 N-able (vendorProject = N-able) => 5 (0.3%); ransomware Known 0; added 2026 3 SolarWinds (vendorProject = SolarWinds) => 11 (0.6%); ransomware Known 2; added 2026 4 Veeam (vendorProject = Veeam) => 4 (0.2%); ransomware Known 4; added 2026 0 QNAP (vendorProject = QNAP) => 11 (0.6%); ransomware Known 9; added 2026 0 Synology (vendorProject = Synology) => 0 (0.0%); ransomware Known 0; added 2026 0 Zyxel (vendorProject = Zyxel) => 13 (0.7%); ransomware Known 2; added 2026 1 D-Link (vendorProject = D-Link) => 26 (1.5%); ransomware Known 2; added 2026 1 TP-Link (vendorProject = TP-Link) => 6 (0.3%); ransomware Known 0; added 2026 0 == vendorProject spellings containing the listed names (to expose variants) == microsoft => Microsoft:391 fortinet => Fortinet:32 ivanti => Ivanti:38 pulse => Pulse Secure:1 mobileiron => none cisco => Cisco:103 sonicwall => SonicWall:20 citrix => Citrix:27 vmware => VMware:26; VMware Tanzu:3 broadcom => Broadcom:6 apple => Apple:96 google => Google:77 adobe => Adobe:83 connectwise => ConnectWise:4 kaseya => Kaseya:3 n-able => N-able:5 solarwinds => SolarWinds:11 veeam => Veeam:4 qnap => QNAP:11; QNAP Systems:1 synology => none zyxel => Zyxel:13 d-link => D-Link:26; D-Link and TRENDnet:1 tp-link => TP-Link:6 == Microsoft product values == Windows:173; Internet Explorer:36; Office:30; Win32k:25; Exchange Server:17; SharePoint:10; SharePoint Server:5; Defender:5; Word:4; Open Management Infrastructure (OMI):4; .NET Framework:3; Active Directory:3; Silverlight:3; Excel:3; SQL Server:2; Windows :2; XML Core Services:2; PowerPoint:2; SMBv1 server:2; DirectX Graphics Kernel (DXGKRNL):2; Edge and Internet Explorer:2; Edge:2; Graphics Device Interface (GDI):2; SMBv1:2; Enhanced Cryptographic Provider:2; MSHTML:2; Internet Key Exchange (IKE) Service Extensions:1; Windows Ancillary Function Driver for WinSock :1; Active Directory Federation Services:1; DirectX:1; Microsoft:1; Visual Basic for Applications (VBA):1; Configuration Manager:1; Partner Center:1; Power Pages:1; Office Outlook:1; Publisher:1; Project:1; DWM Core Library:1; SmartScreen Prompt:1; Streaming Service:1; Skype for Business:1; WordPad:1; Windows CNG Key Isolation Service:1; Streaming Service Proxy:1; .NET Core and Visual Studio:1; Outlook:1; Windows COM+ Event System Service:1; Input Method Editor (IME) Japanese:1; Internet Explorer and Edge:1; Update Notification Manager:1; HTTP Protocol Stack:1; Client-Server Run-time Subsystem (CSRSS):1; Ancillary Function Driver (afd.sys):1; Internet Explorer Scripting Engine:1; Kerberos Key Distribution Center (KDC):1; Task Scheduler:1; Malware Protection Engine:1; ATM Font Driver:1; Forefront Threat Management Gateway (TMG):1; Graphics Component:1; SMBv3:1; HTTP.sys:1; WinVerifyTrust function:1; Exchange:1; Internet Information Services (IIS):1; Remote Desktop Services:1; Hyper-V RemoteFX:1; MSCOMCTL.OCX:1; Office and WordPad:1; Netlogon:1; .NET Framework, SharePoint, Visual Studio:1 == Google product values == Chromium V8:41; Chromium:7; Pixel:2; Chromium Mojo:2; Chromium Skia:2; Chromium Intents:2; Chromium Blink:2; Brotli:1; Dawn:1; Skia:1; Chromium WebRTC:1; Chromium libvpx:1; Chromium WebP:1; Chromium Network Service:1; Chromium GPU:1; Chromium PopupBlocker:1; Chrome Blink:1; Chrome WebAudio:1; Chromium Animation:1; Chrome Media:1; Chrome for Android UI:1; Chrome FreeType:1; Chrome:1; Chromium Indexed DB API:1; Chromium Portals:1; Chromium WebGL:1