Vulnerability landscape by sector
Every vendor and product in the CVE corpus, classified into 15 solution sectors.
Sectors by CVEs over the last 12 months
- Operating Systems77,051
- Web & CMS Plugins66,504
- Open Source Libraries50,831
- Enterprise Software47,569
- Networking & Infrastructure28,090
- Consumer Software25,003
- Mobile Apps23,421
- Security Products16,823
- 7 smaller sectors76,614
- Databases15,398
- Hardware & Firmware14,893
- Cloud & SaaS12,560
- ICS, OT & IoT12,554
- Developer Tools & CI/CD8,493
- Communications8,215
- AI & ML4,501
A CVE that touches products in several sectors counts in each of them. Critical and CISA KEV counts are held back while the sector snapshots are recounted.
All sectors
- 1Operating SystemsTrack CVEs across operating systems — Linux distributions, Windows, macOS, Android, iOS and BSD.77,051—77,051all time
- 2Web & CMS PluginsVulnerabilities in WordPress plugins and themes, CMS cores, e-commerce platforms and site builders.66,504—66,504all time
- 3Open Source LibrariesCVEs across npm, PyPI, Maven, Go, RubyGems, Cargo and other package ecosystems.50,831—50,831all time
- 4Enterprise SoftwareCVEs in ERP, CRM, HR and finance systems, collaboration suites and ITSM/monitoring.47,569—47,569all time
- 5Networking & InfrastructureCVEs in routers, switches, firewalls, VPN gateways, DNS and proxies.28,090—28,090all time
- 6Consumer SoftwareVulnerabilities in browsers, media players, productivity apps, games and utilities.25,003—25,003all time
- 7Mobile AppsVulnerabilities in Android and iOS applications and cross-platform mobile frameworks.23,421—23,421all time
- 8Security ProductsCVEs in AV/EDR, SIEM, IAM, vulnerability scanners and PKI.16,823—16,823all time
- 9DatabasesCVEs in relational and NoSQL databases, data warehouses, caches and message queues.15,398—15,398all time
- 10Hardware & FirmwareCVEs in BIOS/UEFI, CPUs and GPUs, storage, printers and network adapters.14,893—14,893all time
- 11Cloud & SaaSVulnerabilities in cloud platforms, SaaS applications, virtualization and container orchestration.12,560—12,560all time
- 12ICS, OT & IoTVulnerabilities in industrial control systems, SCADA/PLC, building automation, medical devices and IP cameras.12,554—12,554all time
- 13Developer Tools & CI/CDVulnerabilities in IDEs, CI/CD pipelines, source control and artifact registries.8,493—8,493all time
- 14CommunicationsVulnerabilities in email servers and clients, messaging, VoIP and video conferencing.8,215—8,215all time
- 15AI & MLCVEs in LLM serving and inference, ML frameworks, vector databases and agent tooling.4,501—4,501all time