Month report

November 2016

Rolled up 2026-08-09 20:45 from 370,690 CVE records

386 CVEs published, +6.9% on the same month last year. 1 rated critical, 0 listed by CISA as exploited. google led with 50; the most common weakness class was CWE-362 (2). 5 vendors ranked for the first time.

← October 2016 All months December 2016 →

Published

386

-43.8%on the previous month

Critical / high

1 / 8

of the 11 scored

Medium / low

2 / 0

the rest of the scored bands

Added to CISA KEV

listed as exploited this month

Public exploit

exploit code indexed publicly

Scanner template

0% of the month

Publication to KEV

How long before CISA listed them

8 published this month and listed since — not the 0 listed during it.

Median days to listing

1943.5

from publication to CISA's date added

Listed within 7 days

of the 8

Listed within 30 days

of the 8

Weakness × vendor

Where the two overlap

CVEs carrying both. Each row is shaded against its own worst class.

Vendor	CWE-362	CWE-416	CWE-611	CWE-119	CWE-787	CWE-843
google
lenovo group
teradata
dell emc
micro focus

Vendors

Ranked by distinct CVEs this month

Δ is the move against last month's rank.

Vendors ranked by distinct CVEs published in 2016-11, sorted by CVEs descending
#	Vendor			Top products
1	google	50	2	android (50)	new
2	lenovo group	3		all thinkpad thinkcentre thinkstation and lenovo branded systems preloaded with the windows 10 operating system or any system running lenovo companion lenovo settings or lenovo id (1) · lenovo notebook models 110 14ibr 110 15ibr b70 80 e31 80 e40 80 e41 80 e51 80 g40 80 g50 80 g50 80 touch ideapad 300 14ibr 300 15ibr ideapad 300 14isk 300 15isk 300 17isk ideapad 510s 12isk k21 80 k41 80 miix 710 12ikb xiaoxin air 12 yoga 510 14isk 510 15isk yoga 710 11ikb yoga 710 11isk yoga 900 13isk yoga 900s 12isk thinkserver models thinkserver ts150 thinkserver ts450 (1) · thinkpad systems (1)	new
3	teradata	3		virtual machine community edition (2) · studio express (1)	new
4	dell emc	1		idrac7 and idrac8 (1)	new
5	micro focus	1		micro focus rumba 9 4 (1)	new

One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2016-11 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 5 ranked vendors are listed; a zero count renders as a dot.

Weaknesses

CWE classes by distinct CVEs

1CWE-36220 critical·
2CWE-41620 critical·
3CWE-61120 critical·
4CWE-11911 critical·
5CWE-78710 critical·
6CWE-84310 critical·

One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.