Will more than 30% of 2026 CISA KEV entries name a Microsoft product?

About

Resolves YES if, of all entries added to the CISA KEV catalogue with dateAdded in 2026, more than 30% have a vendorProject field equal to "Microsoft".

Resolution criteria

Compute count(vendorProject == 'Microsoft' AND year(dateAdded) == 2026) / count(year(dateAdded) == 2026) > 0.30.

Source

CISA KEV CSV at https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv.

Ambiguity

Effectively none. AMBIGUOUS only if CISA changes the KEV schema during the window.

Discussion

Loading comments…