Skip to content
patchdrift.
snapshot 2026-09-07

Vendors whose records changed

as of the 2026-09-07 snapshot

How this is measured →Check your tickets

1,243 vendors

named in a CVE or CISA KEV record edited after publication. Most records changed under Red Hat: 505.

Records, never added across vendors: a record naming two belongs to both. 829 of the 1,243 vendors have one changed record.

Ranked by records changed

top 25 of 1,243 vendors
All 1,243 vendors →
Vendors by records that changedrecords, never rows

Ranked by count, not rate; a vendor with more records has more that can change.

The 12 drawn here are 12 of 1,243 vendors. 829 of the other 1,231 have one changed record each; none of their records are added together here. For a rate by publisher, see the scorecard.

VendorRecords (sorted, highest first; activate to reverse), Distinct CVE records naming this vendor that changed after publication, across every kind of change. Records do not add up down this column: a record naming two vendors belongs to both.Rows, One row for each record, kind of change and product, so a record whose fix version moved for four operating systems is one record and four rows. Rows do add up down this column.Products, Distinct products named across this vendor's changed records.Mostly, The kind of change with the most rows for this vendor, and how many kinds there are.Last change, The most recent day a change to one of this vendor's records was carried by a commit we read. That is the day the record changed, not the day the vendor decided to change it.
Red Hat5051,888261Product added · 3 kinds2026-09-04
Microsoft356690157Product added · 5 kinds2026-09-04
Apple34354810Product added · 3 kinds2026-08-25
Adobe16427622Product added · 4 kinds2026-09-04
Siemens128934364Product added · 2 kinds2026-08-13
Autodesk9557418Product added2026-08-07
Mozilla84905Product added · 3 kinds2026-01-29
Fortinet7313321Affected range extended · 4 kinds2026-08-14
Mediatek, Inc.72723Product added2026-03-30
Cisco394631Product added · 2 kinds2026-08-11
GNOME30309Product added2026-09-02
Acronis29368Product added · 2 kinds2026-04-10
Broadcom27276Product added · 2 kinds2026-08-18
Linux24413Fix version moved · 3 kinds2026-08-28
Roxnor23233Product added2026-04-08
Unknown (the record's own vendor string)222316Affected range extended · 3 kinds2026-08-31
Elecom co.,ltd.2114146Product added2026-05-12
Intel21213Product added · 2 kinds2025-04-29
Stellarwp21213Product added · 2 kinds2026-04-08
Hewlett Packard Enterprise (HPE)20203Product added · 2 kinds2026-03-30
Mitsubishi Electric Corporation18341258Product added2026-08-27
Google18199Added to CISA KEV · 3 kinds2026-09-04
Ivanti17209Added to CISA KEV · 4 kinds2026-06-11
Pickplugins17178Affected range extended · 2 kinds2026-04-08
Wpdevteam17172Product added2026-04-08
vendor not named in the recordno vendor2,352no vendorSee the rows →

Ranked by change count. A CVE can appear under multiple vendors.

Counting & vendor names

Names follow the source record and may use different spellings. Only counted changes are included. 9,647 rows name a vendor; 2,352 have no vendor, for 11,999 total rows.

Every change, one row each →The rate, by publisher →Download the data →
Data coverage & methodology

Counts cover 15 change types. They measure record revisions, not vendor vulnerability rates. Publisher rates ↗

CVE publication comparisons cover 2023 onward. KEV changes begin with the first mirrored catalog snapshot.

Shipped snapshot computed 2026-09-07 from catalog commit 1f78fd2580c1. Real findings, not live ones: records amended since are not reflected. A later fix version is evidence that the record changed, not evidence that the first fix was incomplete.