Solution sectors / consumer-software
Consumer Software
Consumer desktop software — browsers, media players, productivity apps and utilities — is installed on hundreds of millions of machines, making it a broad attack surface. This hub tracks CVEs across it.
Cumulative CVEs
23,207
across 293 monthly snapshots
Latest month
287 · proj
-71.9% MoM · +55.1% YoY
Peak month
1,401
Jun 26
KEV this month
0
24 vendors affected
CVEs per month
Newest period on the right. Click a point to open that monthly report.
Deployment mix
How this sector's software is typically delivered (month in progress) — whether you patch it yourself or a vendor does. AI-assisted vendor classification.
- On-prem69%
- Mixed31%
Latest CVEs in this sector
The 15 most recently published vulnerabilities tagged to Consumer Software.
- CVE-2026-72809SiYuan before v3.7.4 Authentication Bypass via Localhost Trust8.0
- CVE-2026-72808SiYuan before v3.7.4 Information Disclosure via getFileAnnotation5.8
- CVE-2026-72807SiYuan before v3.7.4 SQL Injection via queryBlocks template8.0
- CVE-2026-72806SiYuan before v3.7.4 Authentication Bypass via Attribute View5.8
- CVE-2026-72805SiYuan before v3.7.4 Information Disclosure via Block Endpoints5.8
- CVE-2026-72804SiYuan before v3.7.4 Authentication Bypass via Graph Endpoints8.6
- CVE-2026-72803SiYuan before v3.7.4 Information Disclosure via getBlockAttrs5.8
- CVE-2026-72802SiYuan before v3.7.4 Information Disclosure via resolveAssetPath5.3
- CVE-2026-72801SiYuan before v3.7.4 Information Disclosure via Encryption Key Material7.5
- CVE-2026-72800SiYuan before v3.7.4 Information Disclosure via Unfiltered API5.8
- CVE-2026-72799SiYuan before v3.7.4 Information Disclosure via Path Resolution5.8
- CVE-2026-72798SiYuan before v3.7.4 Information Disclosure via renderAttributeView8.6
- CVE-2026-72797SiYuan before v3.7.4 Information Disclosure via getEncryptedNotebookStatus5.8
- CVE-2026-72796SiYuan before v3.7.4 Access Control Bypass via Static Routes5.8
- CVE-2026-72795SiYuan before v3.7.4 Information Disclosure via Embed Block8.6
Weakness fingerprint
Top CWE classes in this sector, latest monthly snapshot (month in progress).
Top vendors
Most CVEs in this sector, latest monthly snapshot (month in progress).
| Vendor | CVEs | Crit | KEV |
|---|---|---|---|
| msi | 11 | 11 | · |
| adobe | 8 | 6 | · |
| siyuan-note | 8 | 3 | · |
| autodesk | 7 | · | · |
| rclone | 5 | · | · |
Subsectors
Breakdown for the latest monthly snapshot (month in progress).
| Subsector | CVEs | Crit | KEV | Vendors | MoM | Top products |
|---|---|---|---|---|---|---|
| browser | 58 | 7 | · | 4 | — | chrome (41) · microsoft edge (chromium-based) (14) · edge (1) |
| productivity | 31 | 14 | · | 8 | — | radix axe6600 (11) · siyuan (8) · revit (5) |
| — | 10 | 13 | · | 4 | — | adobe campaign classic (7) · campaign (7) · anki (1) |
| file-utility | 9 | 1 | · | 5 | — | rclone (5) · ccleaner (1) · lightftp (1) |
| gaming | 2 | · | · | 2 | — | football pool (1) · rzupdateservice (1) |
| media-player | 1 | · | · | 1 | — | audiobookshelf (1) |
Sector classification is AI-assisted with human review. How tagging works · Report a misclassification