Root Evidence published a chart measuring the median time between when software vendors issued a patch for a CVE and when VulnCheck KEV first saw exploitation in the wild.

Signal category

Research & Knowledge

Quote

“The chart below measure the median time for when software vendors issued a patch for a CVE to when VulnCheck KEV first saw exploitation in-the-wild.”

— Jeremiah Grossman|Root Evidence team