MS Patch Tuesday // CISA KEV // ZDI

TrendAI | Zero Day Initiative zerodayinitiative.com
Microsoft CVEs filters
Microsoft CVEs

Microsoft monthly CVEs

Source: TrendAI ZDI

Microsoft CVEs breakdown by type share of matches

Source: TrendAI ZDI

Microsoft CVSS score bands matches

Source: TrendAI ZDI

CISA KEV by vendor full catalog, top 15 vendors (not affected by filters above)

CISA KEV by vendor · monthly top 5 vendors and others, last 25 months

Entries added to the KEV catalog per month (by date added)

ZDI Advisories · monthly top 5 vendors and others, last 25 months

Advisories published and upcoming by month, ZDI archive 2021–2026
Source: TrendAI ZDI

CVE Tracker all CVEs published per month

Range Scale
Source: CVEProject/cvelistV5 via cve.0xosprey.com

CVE Publishing Speed YoY 30-day moving average

Source: CVEProject/cvelistV5 via cve.0xosprey.com

Year-over-year cumulative CVEs 2022–2026

Data through 2026-10-29
Range Scale
Source: CVEProject/cvelistV5 via cve.0xosprey.com

ZDI Microsoft monthly insights

Month Year Total Critical Important RCE EoP Public Exploited In KEV Wormable Crit %

Microsoft CVE list

Month CVE Title Severity CVSS Public Exploited Type In KEV Wormable

In CISA KEV: from the CISA Known Exploited Vulnerabilities catalog (version 2026.10.13), Microsoft entries only. The catalog has 390 Microsoft entries, 81 of which are in these monthly tables. Its 22 entries here aren't marked Exploited by ZDI. The other KEV entries are outside these releases, mostly older CVEs. Wormable is taken from ZDI's own posts, which named 59 October 2026 CVEs and 4 others (May, June and August 2026). ZDI's September 2026 post says 20 are wormable but doesn't list them, so September is not tagged. Other months are not tagged. Treat the Wormable filter as a floor, not a complete count. 50 CVEs per page, latest release first. PRIORITY marks CVEs that are exploited (ZDI or CISA KEV), wormable (ZDI-named), or Critical and publicly disclosed.

Click a CVE id to open its MSRC advisory. Third-party (*) rows are not included in this dashboard.

CISA KEV list

CISA Known Exploited Vulnerabilities catalog, all vendors, newest first. 50 per page.
Date added CVE Vendor Product Name Summary Due Days to due Ransomware use

ZDI Published Advisories list

TrendAI Zero Day Initiative published advisories, 2021–2026, newest first. 50 per page.
Published ZDI ID Vendor / Product CVE CVSS

ZDI upcoming advisories list

Advisories reported to ZDI and awaiting disclosure, newest report first. 50 per page.
Reported Deadline ZDI CAN Affected vendor CVSS Discovered by