Month report
December 2016
Rolled up 2026-08-09 20:45 from 370,700 CVE records
517 CVEs published, -8.5% on the same month last year. 1 rated critical, 0 listed by CISA as exploited. nvidia led with 15; the most common weakness class was CWE-125 (2). 7 vendors ranked for the first time.
Published
517
Critical / high
1 / 17
Medium / low
2 / 0
Added to CISA KEV
0
Public exploit
38
Scanner template
0
Publication to KEV
How long before CISA listed them
Median days to listing
1917.5
Listed within 7 days
0%
Listed within 30 days
0%
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | nvidia | 15 | 1 | quadro nvs geforce grid and tesla (8) · windows gpu display driver (6) · geforce experience (1) | new | |||
| 2 | joyent | 6 | smartos (6) | new | ||||
| 3 | intel | 3 | intel proset wireless software and drivers (1) · intel wireless bluetooth drivers (1) · nuc kits (1) | new | ||||
| 4 | siemens | 2 | simatic s7 300 cpu family (2) · simatic s7 300 cpu family incl related et200 cpus and siplus variants (2) · simatic s7 400 pn dp v6 and below cpu family incl siplus variants (2) | · | ||||
| 5 | tarantool | 2 | msgpuck library (1) · tarantool (1) | new | ||||
| 6 | apache | 1 | 1 | apache http server (1) | new | |||
| 7 | rapid7 | 1 | nexpose (1) | new | ||||
| 8 | wampserver | 1 | wampserver (1) | new |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2016-12 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 8 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-12520 critical·
- 2CWE-11110 criticalnew
- 3CWE-12010 critical·
- 4CWE-2010 critical·
- 5CWE-20010 critical·
- 6CWE-2210 critical·
- 7CWE-33210 criticalnew
- 8CWE-35210 critical·
- 9CWE-40010 critical·
- 10CWE-41610 critical↓8
- 1CWE-83510 critical·
- 2CWE-8811 critical·
- 3CWE-9410 critical·
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.