Month report

April 2009

Rolled up 2026-08-09 20:45 from 373,049 CVE records

567 CVEs published, +24.3% on the same month last year. 0 rated critical, 0 listed by CISA as exploited. microsoft led with 1; the most common weakness class was CWE-94 (1). 1 vendor ranked for the first time.

← March 2009 All months May 2009 →

Published

567

+2.5%on the previous month

Critical / high

0 / 3

of the 3 scored

Medium / low

0 / 0

the rest of the scored bands

Added to CISA KEV

listed as exploited this month

Public exploit

257

exploit code indexed publicly

Scanner template

0% of the month

Publication to KEV

How long before CISA listed them

1 published this month and listed since — not the 0 listed during it.

Median days to listing

6123

from publication to CISA's date added

Listed within 7 days

of the 1

Listed within 30 days

of the 1

Weakness × vendor

Where the two overlap

CVEs carrying both. Each row is shaded against its own worst class.

Vendor	CWE-94
microsoft

Vendors

Ranked by distinct CVEs this month

Δ is the move against last month's rank.

Vendors ranked by distinct CVEs published in 2009-04, sorted by CVEs descending
#	Vendor						Top products
1	microsoft	1					ie (1)	new

One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2009-04 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 1 ranked vendors are listed; a zero count renders as a dot.

Weaknesses

CWE classes by distinct CVEs

1CWE-9410 critical↑1

One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.