Skip to content

Every change, newest first

What a record said when it was published, what it says now, and the commit that changed it.

3,872 changes refused · newest first · grouped by dayCSVJSONRSS

SinceClear the filter
ChangedSourceRows

These rows are not counted anywhere on this site. Checked and refused means we compared this change and then rejected it: the false positive filter for this kind of change judged it to be a false positive rather than a real change. The row is shown so you can check the filter and disagree with us, and it is counted in no figure on this site. No advisory change is here: the advisory engine counts the 2,291 version pairs its filters refused by class rather than writing them out one by one, so this view holds CVE and KEV changes only.

Rows we checked and refused, counted nowhere, newest first, one line per change to a CVE record, or per run of identical changes collapsed into one line.
Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin.KindRecord, Which record was edited, by its CVE id, or how many records one collapsed line stands on.Vendor · product, The vendor and product a CVE record names, with the organisation that publishes the record under them; or the package an advisory names and its registry.What changedDays to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong.
Sun 6 Sep 2026· 1 record change
2026-09-06Product addedCVE-2026-75569not named as affected at publication, now names multicluster engine for kubernetes 2.1Not counted: Product relabelled. probable relabelling of red hat/multicluster engine for kubernetes, not a newly affected productDays to revision 18
Sat 5 Sep 2026· 11 record changes
2026-09-05Product addedCVE-2026-10059not named as affected at publication, now names multicluster engine for kubernetes 2.1Not counted: Product relabelled. probable relabelling of red hat/multicluster engine for kubernetes, not a newly affected productDays to revision 31
2026-09-05Product addedCVE-2026-19130not named as affected at publication, now names multicluster engine for kubernetes 2.1Not counted: Product relabelled. probable relabelling of red hat/multicluster engine for kubernetes, not a newly affected productDays to revision 24
2026-09-05Product addedCVE-2026-66794not named as affected at publication, now names multicluster engine for kubernetes 2.1Not counted: Product relabelled. probable relabelling of red hat/multicluster engine for kubernetes, not a newly affected productDays to revision 17
2026-09-05Product addedCVE-2026-66795not named as affected at publication, now names multicluster engine for kubernetes 2.1Not counted: Product relabelled. probable relabelling of red hat/multicluster engine for kubernetes, not a newly affected productDays to revision 19
2026-09-05Product addedCVE-2026-73266not named as affected at publication, now names multicluster engine for kubernetes 2.1Not counted: Product relabelled. probable relabelling of red hat/multicluster engine for kubernetes, not a newly affected productDays to revision 23
2026-09-05Product addedCVE-2026-73267not named as affected at publication, now names multicluster engine for kubernetes 2.1Not counted: Product relabelled. probable relabelling of red hat/multicluster engine for kubernetes, not a newly affected productDays to revision 16
2026-09-05Product addedCVE-2026-73268not named as affected at publication, now names multicluster engine for kubernetes 2.1Not counted: Product relabelled. probable relabelling of red hat/multicluster engine for kubernetes, not a newly affected productDays to revision 24
2026-09-05Product addedCVE-2026-73269not named as affected at publication, now names multicluster engine for kubernetes 2.1Not counted: Product relabelled. probable relabelling of red hat/multicluster engine for kubernetes, not a newly affected productDays to revision 24
2026-09-05Product addedCVE-2026-85599VulnChecknot named as affected at publication, now names grav-plugin-shortcode-coreNot counted: Product relabelled. probable relabelling of getgrav/grav, not a newly affected productDays to revision 1
2026-09-05Product addedCVE-2026-85600VulnChecknot named as affected at publication, now names grav-plugin-admin2Not counted: Product relabelled. probable relabelling of getgrav/grav, not a newly affected productDays to revision 1
2026-09-05Product addedCVE-2026-85602VulnChecknot named as affected at publication, now names grav-plugin-formNot counted: Product relabelled. probable relabelling of getgrav/grav, not a newly affected productDays to revision 1
Fri 4 Sep 2026· 25 record changes
2026-09-04Affected range extendedCVE-2026-14466
stormshieldstormshield network security
airbus
stated at publication 5.0.6, now states 5.1.0Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 5.0.6 still holdsnot dated
2026-09-04Product addedCVE-2025-67041mitrenot named as affected at publication, now names eds3000ps seriesNot counted: No products named at publication. record named no affected product at publication — there was nothing to conclude 'not affected' fromDays to revision 178
2026-09-04Product addedCVE-2025-70082mitrenot named as affected at publication, now names eds3000ps seriesNot counted: No products named at publication. record named no affected product at publication — there was nothing to conclude 'not affected' fromDays to revision 178
2026-09-04Product addedCVE-2025-67038mitrenot named as affected at publication, now names e210 seriesNot counted: No products named at publication. record named no affected product at publication — there was nothing to conclude 'not affected' fromDays to revision 178
2026-09-04Product addedCVE-2025-67038mitrenot named as affected at publication, now names e220 seriesNot counted: No products named at publication. record named no affected product at publication — there was nothing to conclude 'not affected' fromDays to revision 178
2026-09-04Product addedCVE-2025-67038mitrenot named as affected at publication, now names eds5000 seriesNot counted: No products named at publication. record named no affected product at publication — there was nothing to conclude 'not affected' fromDays to revision 178
2026-09-04Product addedCVE-2025-67038mitrenot named as affected at publication, now names g520 seriesNot counted: No products named at publication. record named no affected product at publication — there was nothing to conclude 'not affected' fromDays to revision 178
2026-09-04Product addedCVE-2025-67038mitrenot named as affected at publication, now names x300 seriesNot counted: No products named at publication. record named no affected product at publication — there was nothing to conclude 'not affected' fromDays to revision 178
2026-09-04Product addedCVE-2025-67039mitrenot named as affected at publication, now names eds3000ps seriesNot counted: No products named at publication. record named no affected product at publication — there was nothing to conclude 'not affected' fromDays to revision 178
2026-09-04Product addedCVE-2025-67036mitrenot named as affected at publication, now names eds5000 seriesNot counted: No products named at publication. record named no affected product at publication — there was nothing to conclude 'not affected' fromDays to revision 178
2026-09-04Product addedCVE-2025-67036mitrenot named as affected at publication, now names g520 seriesNot counted: No products named at publication. record named no affected product at publication — there was nothing to conclude 'not affected' fromDays to revision 178
2026-09-04Product addedCVE-2025-67036mitrenot named as affected at publication, now names x300 seriesNot counted: No products named at publication. record named no affected product at publication — there was nothing to conclude 'not affected' fromDays to revision 178
2026-09-04Product addedCVE-2025-67037mitrenot named as affected at publication, now names eds5000 seriesNot counted: No products named at publication. record named no affected product at publication — there was nothing to conclude 'not affected' fromDays to revision 178
2026-09-04Product addedCVE-2025-67037mitrenot named as affected at publication, now names g520 seriesNot counted: No products named at publication. record named no affected product at publication — there was nothing to conclude 'not affected' fromDays to revision 178
2026-09-04Product addedCVE-2025-67037mitrenot named as affected at publication, now names x300 seriesNot counted: No products named at publication. record named no affected product at publication — there was nothing to conclude 'not affected' fromDays to revision 178
2026-09-04Product addedCVE-2025-67035mitrenot named as affected at publication, now names eds5000 seriesNot counted: No products named at publication. record named no affected product at publication — there was nothing to conclude 'not affected' fromDays to revision 178
2026-09-04Product addedCVE-2024-3884not named as affected at publication, now names red hat jboss enterprise application platform 8.1.6Not counted: Product relabelled. probable relabelling of red hat/red hat jboss enterprise application platform 8, not a newly affected productDays to revision 275
2026-09-04Product addedCVE-2025-12543not named as affected at publication, now names red hat jboss enterprise application platform 8.1.6Not counted: Product relabelled. probable relabelling of red hat/red hat jboss enterprise application platform 8, not a newly affected productDays to revision 240
2026-09-04Product addedCVE-2025-67034mitrenot named as affected at publication, now names eds5000 seriesNot counted: No products named at publication. record named no affected product at publication — there was nothing to conclude 'not affected' fromDays to revision 178
2026-09-04Product addedCVE-2025-67034mitrenot named as affected at publication, now names g520 seriesNot counted: No products named at publication. record named no affected product at publication — there was nothing to conclude 'not affected' fromDays to revision 178
2026-09-04Product addedCVE-2025-67034mitrenot named as affected at publication, now names x300 seriesNot counted: No products named at publication. record named no affected product at publication — there was nothing to conclude 'not affected' fromDays to revision 178
2026-09-04Product addedCVE-2024-5971not named as affected at publication, now names red hat jboss enterprise application platformNot counted: Already named at publication. already named at publication inside red hat/red hat jboss enterprise application platform 7 — the record spelled this product out all alongDays to revision 788
2026-09-04Product addedCVE-2026-77995Joomlanot named as affected at publication, now names miniorange oauth client (free) extension for joomlaNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed miniorange.com/miniorange oauth client extension for joomla; a new product identity is not establishedDays to revision 11
2026-09-04Product addedCVE-2026-16493not named as affected at publication, now names red hat satellite 6.18 for rhel 9Not counted: Product relabelled. probable relabelling of red hat/red hat satellite 6, not a newly affected productDays to revision 44
2026-09-04Product addedCVE-2026-16493not named as affected at publication, now names red hat satellite 6.19 for rhel 9Not counted: Product relabelled. probable relabelling of red hat/red hat satellite 6, not a newly affected productDays to revision 44
Thu 3 Sep 2026· 21 record changes
2026-09-03Fix version movedCVE-2026-13086
watchguardfireware os
stated at publication 2026.2.2, now states 2026.3.1Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 2026.2.2 still holdsnot dated
2026-09-03Fix version movedCVE-2026-19313
watchguardfireware os
stated at publication 2026.2.2, now states 2026.3.1Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 2026.2.2 still holdsnot dated
2026-09-03Fix version movedCVE-2026-19314
watchguardfireware os
stated at publication 2026.2.2, now states 2026.3.1Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 2026.2.2 still holdsnot dated
2026-09-03Fix version movedCVE-2026-19315
watchguardfireware os
stated at publication 2026.2.2, now states 2026.3.1Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 2026.2.2 still holdsnot dated
2026-09-03Fix version movedCVE-2026-19316
watchguardfireware os
stated at publication 2026.2.2, now states 2026.3.1Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 2026.2.2 still holdsnot dated
2026-09-03Fix version movedCVE-2026-19317
watchguardfireware os
stated at publication 2026.2.2, now states 2026.3.1Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 2026.2.2 still holdsnot dated
2026-09-03Fix version movedCVE-2026-19318
watchguardfireware os
stated at publication 2026.2.2, now states 2026.3.1Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 2026.2.2 still holdsnot dated
2026-09-03Product addedCVE-2026-16493not named as affected at publication, now names red hat satellite 6.17 for rhel 9Not counted: Product relabelled. probable relabelling of red hat/red hat satellite 6, not a newly affected productDays to revision 44
2026-09-03Product addedCVE-2026-15563not named as affected at publication, now names red hat fuse 7Not counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 24
2026-09-03Product addedCVE-2026-15927not named as affected at publication, now names red hat quay 3.15Not counted: Product relabelled. probable relabelling of red hat/red hat quay 3, not a newly affected productDays to revision 45
2026-09-03Product addedCVE-2026-12894not named as affected at publication, now names red hat build of apache camel 3.33 for quarkus 3.33.3.sp1Not counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 3
2026-09-03Product addedCVE-2026-17615not named as affected at publication, now names red hat build of apache camel 3.33 for quarkus 3.33.3.sp1Not counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 3
2026-09-03Product addedCVE-2025-9189NInot named as affected at publication, now names dasylabNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 366
2026-09-03Product addedCVE-2026-0872THA-PSIRTnot named as affected at publication, now names safenet agent for windows logonNot counted: Product relabelled. probable relabelling of thales/safenet agent for windows logon, not a newly affected productDays to revision 202
2026-09-03Product addedCVE-2026-3457THA-PSIRTnot named as affected at publication, now names sentinel ldk runtimeNot counted: Product relabelled. probable relabelling of thales/sentinel ldk runtime, not a newly affected productDays to revision 160
2026-09-03Product addedCVE-2026-49332not named as affected at publication, now names red hat openshift container platform 4.17Not counted: Product relabelled. probable relabelling of red hat/red hat openshift container platform 4, not a newly affected productDays to revision 37
2026-09-03Product addedCVE-2026-50236not named as affected at publication, now names red hat openshift container platform 4.17Not counted: Product relabelled. probable relabelling of red hat/red hat openshift container platform 4, not a newly affected productDays to revision 23
2026-09-03Product addedCVE-2026-50237not named as affected at publication, now names red hat openshift container platform 4.17Not counted: Product relabelled. probable relabelling of red hat/red hat openshift container platform 4, not a newly affected productDays to revision 23
2026-09-03Product addedCVE-2025-12107not named as affected at publication, now names identity serverNot counted: Product relabelled. probable relabelling of wso2/wso2 identity server, not a newly affected productDays to revision 196
2026-09-03Product addedCVE-2026-66787not named as affected at publication, now names red hat advanced cluster management for kubernetes 2.17Not counted: Product relabelled. probable relabelling of red hat/red hat advanced cluster management for kubernetes 2, not a newly affected productDays to revision 13
2026-09-03Product addedCVE-2026-66788not named as affected at publication, now names red hat advanced cluster management for kubernetes 2.17Not counted: Product relabelled. probable relabelling of red hat/red hat advanced cluster management for kubernetes 2, not a newly affected productDays to revision 13
Wed 2 Sep 2026· 1 record change
2026-09-02Affected range extendedCVE-2026-82641
keploykeploy
VulnCheck
stated at publication 3.6.25, now states 3.6.26Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 3.6.25 still holdsnot dated
Tue 1 Sep 2026· 41 record changes
2026-09-01Product addedCVE-2026-24370Patchstacknot named as affected at publication, now names the gridNot counted: Product relabelled. probable relabelling of theme-one/the grid, not a newly affected productDays to revision 160
2026-09-01Product addedCVE-2026-84118not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84119not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84120not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84121not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84122not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84123not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84124not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84125not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84126not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84128not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84129not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84130not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84131not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84132not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84133not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84134not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84136not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84137not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84138not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84139not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84140not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84141not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84142not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84143not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84144not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84145not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-75121VulnChecknot named as affected at publication, now names planet gs-4210-16p2s v3Not counted: Product relabelled. probable relabelling of planet technology corp./planet gs-4210-16p2s, not a newly affected productDays to revision 4
2026-09-01Product addedCVE-2026-75122VulnChecknot named as affected at publication, now names planet gs-4210-16p2s v3Not counted: Product relabelled. probable relabelling of planet technology corp./planet gs-4210-16p2s, not a newly affected productDays to revision 4
2026-09-01Product addedCVE-2026-75123VulnChecknot named as affected at publication, now names planet gs-4210-16p2s v3Not counted: Product relabelled. probable relabelling of planet technology corp./planet gs-4210-16p2s, not a newly affected productDays to revision 4
2026-09-01Product addedCVE-2026-75124VulnChecknot named as affected at publication, now names planet gs-4210-16p2s v3Not counted: Product relabelled. probable relabelling of planet technology corp./planet gs-4210-16p2s, not a newly affected productDays to revision 4
2026-09-01Product addedCVE-2026-75125VulnChecknot named as affected at publication, now names planet gs-4210-16p2s v3Not counted: Product relabelled. probable relabelling of planet technology corp./planet gs-4210-16p2s, not a newly affected productDays to revision 4
2026-09-01Product addedCVE-2026-75126VulnChecknot named as affected at publication, now names planet gs-4210-16p2s v3Not counted: Product relabelled. probable relabelling of planet technology corp./planet gs-4210-16p2s, not a newly affected productDays to revision 4
2026-09-01Product addedCVE-2026-77217VulnChecknot named as affected at publication, now names planet gs-4210-16p2s v3Not counted: Product relabelled. probable relabelling of planet technology corp./planet gs-4210-16p2s, not a newly affected productDays to revision 4
2026-09-01Product addedCVE-2026-77218VulnChecknot named as affected at publication, now names planet gs-4210-16p2s v3Not counted: Product relabelled. probable relabelling of planet technology corp./planet gs-4210-16p2s, not a newly affected productDays to revision 4
2026-09-01Product addedCVE-2026-15816not named as affected at publication, now names red hat enterprise linux 7 extended lifecycle supportNot counted: Product relabelled. probable relabelling of red hat/red hat enterprise linux 7, not a newly affected productDays to revision 25
2026-09-01Product addedCVE-2026-6893not named as affected at publication, now names red hat enterprise linux 7 extended lifecycle supportNot counted: Product relabelled. probable relabelling of red hat/red hat enterprise linux 7, not a newly affected productDays to revision 83
2026-09-01Product addedCVE-2026-16615not named as affected at publication, now names red hat enterprise linux 10.0 extended update supportNot counted: A variant beneath an already affected parent. support or installation label under already affected red hat/red hat enterprise linux 10; the record does not establish whether this newly names affected scope or refines the existing product listingDays to revision 41
2026-09-01Product addedCVE-2026-24368Patchstacknot named as affected at publication, now names the gridNot counted: Product relabelled. probable relabelling of theme-one/the grid, not a newly affected productDays to revision 222
2026-09-01Product addedCVE-2026-24369Patchstacknot named as affected at publication, now names the gridNot counted: Product relabelled. probable relabelling of theme-one/the grid, not a newly affected productDays to revision 160
2026-09-01Product addedCVE-2026-28191Patchstacknot named as affected at publication, now names the gridNot counted: Product relabelled. probable relabelling of theme-one inc./the grid, not a newly affected productDays to revision 14

Rows, not records: a moved fix version or an extended range counts once per record, product and release branch; an added product once per record and product; every other kind once per record or advisory. Days to revision is how long the value first stated stood: from the record's or advisory's publication, or from the day a KEV field value was first seen, to the first commit that replaced it. An addition to KEV has no earlier value and shows none.

Use arrow keys to move between days, Home or End to reach either end, and Enter to open a day.
3,898 records with a counted edit in the 52 weeks to 7 Sep 2026 · snapshot built 03:47 UTC · scroll for earlierfewermore

Data sources and quality

Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.

A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.

The units, the refusals, the cut-offs and every source, in full →

Check my CVEs against these changes →