What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
No. The available evidence does not show that CISA’s Known Exploited Vulnerabilities (KEV) catalog omits 88% of real-world exploits. The 88% figure comes from Qualys in 2026 and measures remediation speed: in a study of 52 weaponized vulnerabilities, manual remediation was slower than exploitation 88% of the time.
What the 88% statistic actually measures
Qualys’s 2026 report and its April 2026 Threat Research Unit newsletter describe a cohort of 52 weaponized vulnerabilities. The reported result is that vulnerabilities were remediated more slowly than they were exploited in 88% of cases. In other words, the denominator is 52 vulnerabilities and the measured outcome is remediation lag versus exploitation speed—not the share of exploits missing from KEV.
The April newsletter also says that half of the cohort was weaponized before public disclosure. That is a Qualys-reported result, not an independently verified estimate of all vulnerability exploitation.
What CISA says the KEV catalog is for
CISA describes KEV as its authoritative source of vulnerabilities exploited in the wild and recommends using it as an input to vulnerability-management prioritization. CISA’s guidance states: “Organizations should use the KEV catalog as an input to their vulnerability management prioritization framework.”
#1 Best Overall
- Large format scanner - Helps improve access to and management of all your large files
- Has a color depth of 32-bit
That wording establishes KEV’s operational role. It does not promise a complete, real-time census of every exploit used anywhere, nor does it provide a statistic showing that a particular percentage of exploitation is absent.
Why the “missing 88 percent” headline is unsupported
| Claim | What the available source supports |
|---|---|
| KEV misses 88% of exploits | Not established. No published percentage measuring all real-world exploits absent from KEV was identified. |
| 88% of vulnerabilities were exploited before remediation | Qualys reported that manual remediation was outpaced by exploitation 88% of the time in its 52-vulnerability weaponized cohort. |
| KEV should influence prioritization | CISA recommends KEV as an input to a vulnerability-management prioritization framework. |
| Known exploitation is useful context | MITRE’s 2025 CWE analysis uses known exploitation alongside weakness information; it does not establish an 88% KEV-miss rate. |
Confusing these statements changes both the numerator and the question. Qualys compared remediation timing with exploitation timing for selected vulnerabilities. A catalog-completeness claim would require measuring all relevant exploitation, determining which events correspond to catalog entries, and documenting inclusion and exclusion rules.
Rank #2
What remains unknown about the Qualys result
The publicly surfaced Qualys summaries do not provide enough detail to independently assess the cohort-selection rules, exact definitions, calculation method, or time window behind the 52-vulnerability result. Until the full methodology is reviewed, the 88% number should not be generalized to all vulnerabilities, all organizations, or all remediation programs.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallHow security teams should use KEV without overreading it
Treat KEV as a high-priority signal
Use a KEV listing to raise urgency because it represents documented exploitation in the wild according to CISA. Combine that signal with asset exposure, business criticality, affected software versions, compensating controls, and exploitability information.
Rank #3
- Standalone network scanner with scanning speeds of 25 ppm/50 ipm (A4 portrait, 200/300 dpi), ADF capacity of 50 sheets
- PC-less scanning with large touch screen and on-screen keyboard
- Supports scanning from thin paper to thick paper, and plastic cards
- Security measures include Login Authentication with custom job menus, Encryption, Data Transmission Security, and more
- USB port to connect devices like a mouse or contactless IC card reader
Do not treat absence from KEV as proof of safety
A vulnerability not present in KEV should not automatically be considered unexploited or low risk. Catalog status is one input to prioritization, not a warranty that no exploitation exists.
Measure remediation speed separately
If the operational question is whether defenders patch faster than attackers exploit, track time from disclosure or weaponization to exploitation and compare it with time to mitigation in your own environment. That is the type of relationship represented by Qualys’s 88% finding; it is different from measuring catalog coverage.
Quick Recap
Best Value
- FAST BUSINESS PRINTING AND COPYING: The Brother MFC-L5915DW business monochrome laser all-in-one printer delivers high-quality output and print and copy speeds of up to 50ppm(1) to help boost productivity and ensure fast, professional quality documents for busy offices.
- LOW-COST OUTPUT: Help reduce operating costs by using the Brother Genuine TN920UXXL ultra high-yield 18,000-page replacement toner cartridge. Includes a Brother Genuine 3,000-page toner cartridge(2).
- FAST, HIGH-VOLUME SCANNING: The 70-page capacity(3) auto document feeder offers single-pass, two-sided scanning up to 56ipm(4). Features a large document glass for up to legal-sized documents.
- FLEXIBLE CONNECTIVITY OPTIONS: Features built‐in Gigabit Ethernet and dual band wireless networking to seamlessly set up and share on your wired.
What readers can accurately conclude
- The “88%” figure is a Qualys 2026 remediation-speed statistic based on 52 weaponized vulnerabilities.
- It does not quantify the percentage of exploits missing from CISA’s KEV catalog.
- CISA positions KEV as an authoritative exploitation source for prioritization, while not claiming it is a complete census of every exploit.
- MITRE’s 2025 CWE analysis supports using known exploitation as operational context, not an 88% catalog-miss calculation.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errors
