Comparison Overview
HOCHTIEF
HOCHTIEF
Alfredstr. 236, Essen, 45133, DE
Last Update: 12/09/2026
Building means shaping. Buildings change our world. The Gotthard Tunnel in Switzerland, roads, bridges, office or residential buildings, sports facilities and cultural centers such as the Elbe Philharmonic Hall in Hamburg or Madison Square Garden in New York: HOCHTIEF c...
Kiewit
1550 Mike Fahey St., Omaha, 68102, US
Last Update: 15/09/2026
At Kiewit, the projects we deliver make a difference, and we offer opportunities for you to make one, too. Our construction and engineering professionals work on some of the industry’s most complex, challenging and rewarding projects – whether it’s boring tunnels throug...
Compliance Ranges Comparison
HOCHTIEF
Kiewit
Benchmark & Cyber Underwriting Signals
Incidents vs Construction Industry Avg (This Year)
No incidents recorded for HOCHTIEF in 2026.
Incidents vs Construction Industry Avg (This Year)
Kiewit has 1.96% fewer incidents than the average of all companies with at least one recorded incident.
Incident History - HOCHTIEF (X = Date, Y = Severity)
HOCHTIEF cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Kiewit (X = Date, Y = Severity)
Kiewit cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
HOCHTIEF
Kiewit
FAQ
Latest Global CVEs
Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing.
Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory.
Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.
Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.
Mistral Vibe before 2.25.5 contains a remote code execution vulnerability in the worktree creation process that executes git hooks before trust validation. Attackers can supply a repository with a crafted post-checkout hook that executes arbitrary shell commands with the privileges of the user running Vibe.
- https://github.com/mistralai/mistral-vibe
- https://github.com/mistralai/mistral-vibe/blob/19b5b74faa78d0816b8d4d4c7d7543fc3520678c/vibe/core/git/repo.py#L411-L431
- https://github.com/mistralai/mistral-vibe/commit/c069ffa1e12fb5f2487b489217c40ab97721d553
- https://github.com/mistralai/mistral-vibe/issues/996
- https://github.com/mistralai/mistral-vibe/releases/tag/v2.25.5
- https://www.vulncheck.com/advisories/mistral-vibe-before-2.25.5-remote-code-execution-via-git-post-checkout