Trend analysis of the CISA Known Exploited Vulnerabilities catalog. Because every entry records the date it was added, the full history of exploitation additions is available directly from the catalog — no reconstruction required. Below: how many vulnerabilities CISA has flagged as exploited each week, which vendors appear most often, and how much time defenders are given to patch.