Scoring
three systems, three different questionsThree separate records attach to CVEs. They are not ranks of each other and we do not combine them — below is how many CVEs each one covers.
Coverage
How many carry each record
CVSS →
scores recorded, across four metric versions
EPSS →
CVEs with an exploit-probability score
KEV →
CVEs in the CISA catalog