There are total of 18 CVE been added to CISA KEV catalog in November 2023.
CISA Catalog of Known Exploited Vulnerabilities [ 2023.12.01/1043 ]
Updates#
As of today, 8 CVE have overdue (within Nov), and another 10 will due in Dec 2023.
Highlights:
- The top-5 vendors with highest number of vulnerabilities remain the same.
- The top-5 vulnerable products remain the same.
- The mean value increases to 86.916 (was 85.4167)
- The top-5 months where distribution of KEV is higher than
meanremain the same.
Current State#
| Microsoft | Apple | Cisco | Adobe | others | |
|---|---|---|---|---|---|
| 275 | 68 | 67 | 65 | 51 | 517 |
| Windows | Multiple Products (Apple) | Internet Explorer | Flash Player | Chromium V8 Engine | others |
|---|---|---|---|---|---|
| 108 | 31 | 31 | 29 | 25 | 819 |
mean_val=86.91666666666667
| Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 14 | 20 | 120 | 157 | 233 | 146 | 58 | 46 | 48 | 45 | 125 | 31 |