PatchGap
Statistics
Derived from 3,765 tracked browser CVEs. Recomputed on every build — no external data source.
Tracked
3,765
Commit mapped
3655
97% of tracked
Embargoed / no public fix
110
the live patch gap
Exploited in the wild
12
Root-cause analysis
276
7% of mapped
Bug report / PoC
2575 / 0
Patch gap over time — mapped vs. embargoed per advisory month
By severity
By vendor
Top components
Top bug classes
Analysis coverage
Root-cause analysis276 / 3765
Original bug report linked2575 / 3765
Reporter PoC files0 / 3765
Root-cause analysis is written only for CVEs whose fixing commit is public, so coverage is measured against mapped CVEs on the cards above.
Patch gap — fix availability
Fixing commit located3655
Embargoed / not yet public110
A CVE counts as mapped once its fixing change is public in the vendor repository. The remainder is the live gap between disclosure and a locatable public fix.