Skip to content
patchdrift.
snapshot 2026-09-07

Vendors whose records changed

as of the 2026-09-07 snapshot

How this is measured →Check your tickets

1,243 vendors

named in a CVE or CISA KEV record edited after publication. Most records changed under Red Hat: 505.

Records, never added across vendors: a record naming two belongs to both. 829 of the 1,243 vendors have one changed record.

Ranked by records changed

1 to 50 of 1,243 vendors
Top 25 only
Vendors by records that changedrecords, never rows

Ranked by count, not rate; a vendor with more records has more that can change.

The 12 drawn here are 12 of 1,243 vendors. 829 of the other 1,231 have one changed record each; none of their records are added together here. For a rate by publisher, see the scorecard.

VendorRecords (sorted, highest first; activate to reverse), Distinct CVE records naming this vendor that changed after publication, across every kind of change. Records do not add up down this column: a record naming two vendors belongs to both.Rows, One row for each record, kind of change and product, so a record whose fix version moved for four operating systems is one record and four rows. Rows do add up down this column.Products, Distinct products named across this vendor's changed records.Mostly, The kind of change with the most rows for this vendor, and how many kinds there are.Last change, The most recent day a change to one of this vendor's records was carried by a commit we read. That is the day the record changed, not the day the vendor decided to change it.
Red Hat5051,888261Product added · 3 kinds2026-09-04
Microsoft356690157Product added · 5 kinds2026-09-04
Apple34354810Product added · 3 kinds2026-08-25
Adobe16427622Product added · 4 kinds2026-09-04
Siemens128934364Product added · 2 kinds2026-08-13
Autodesk9557418Product added2026-08-07
Mozilla84905Product added · 3 kinds2026-01-29
Fortinet7313321Affected range extended · 4 kinds2026-08-14
Mediatek, Inc.72723Product added2026-03-30
Cisco394631Product added · 2 kinds2026-08-11
GNOME30309Product added2026-09-02
Acronis29368Product added · 2 kinds2026-04-10
Broadcom27276Product added · 2 kinds2026-08-18
Linux24413Fix version moved · 3 kinds2026-08-28
Roxnor23233Product added2026-04-08
Unknown (the record's own vendor string)222316Affected range extended · 3 kinds2026-08-31
Elecom co.,ltd.2114146Product added2026-05-12
Intel21213Product added · 2 kinds2025-04-29
Stellarwp21213Product added · 2 kinds2026-04-08
Hewlett Packard Enterprise (HPE)20203Product added · 2 kinds2026-03-30
Mitsubishi Electric Corporation18341258Product added2026-08-27
Google18199Added to CISA KEV · 3 kinds2026-09-04
Ivanti17209Added to CISA KEV · 4 kinds2026-06-11
Pickplugins17178Affected range extended · 2 kinds2026-04-08
Wpdevteam17172Product added2026-04-08
Nec Corporation168818Product added2024-04-02
WatchGuard16176Affected range extended · 4 kinds2026-08-10
Averta16164Affected range extended2026-04-08
Devitemsllc16161Product added2026-04-08
Freepbx16169Product added2026-02-13
AMD157961Product added2025-11-23
shakee9315151Product added2026-04-08
TP-Link Systems Inc.141714Product added · 2 kinds2026-08-25
Beaverbuilder14141Product added2026-04-08
Saadiqbal14144Product added2026-04-08
Moxa1317962Product added2025-04-03
Sick Ag13297Product added2026-08-24
Bplugins12127Product added2026-04-08
Synacor12122Added to CISA KEV · 2 kinds2026-08-21
Oracle11148Added to CISA KEV · 3 kinds2026-08-26
Ebyte11111Product added2026-08-31
Tp Link Systems Inc.101413Product added2026-08-19
SonicWall10134Added to CISA KEV · 2 kinds2026-09-02
Bdthemes10105Affected range extended · 2 kinds2026-04-08
Mitsubishi Electric Iconics Digital Solutions9357Product added2026-04-13
Palo Alto Networks9125Ransomware use confirmed · 5 kinds2026-07-21
IBM9108Product added · 3 kinds2026-08-19
Arraytics992Product added2026-04-08
Brainstormforce993Product added2026-04-08
World Wide Broadcast Network991Fix version moved2025-12-19

Ranked by change count. A CVE can appear under multiple vendors.

Counting & vendor names

Names follow the source record and may use different spellings. Only counted changes are included. 9,647 rows name a vendor; 2,352 have no vendor, for 11,999 total rows.

Every change, one row each →The rate, by publisher →Download the data →
Data coverage & methodology

Counts cover 15 change types. They measure record revisions, not vendor vulnerability rates. Publisher rates ↗

CVE publication comparisons cover 2023 onward. KEV changes begin with the first mirrored catalog snapshot.

Shipped snapshot computed 2026-09-07 from catalog commit f5f9fc6fd7dc. Real findings, not live ones: records amended since are not reflected. A later fix version is evidence that the record changed, not evidence that the first fix was incomplete.