Comparison Overview
Performance Food Group
Performance Food Group
12500 West Creek Parkway, None, Richmond, VA, US, 23238
Last Update: 03/04/2026
Performance Food Group is an industry leader and one of the largest food and foodservice distribution companies in North America with more than 150 locations in the U.S. and parts of Canada. Founded and headquartered in Richmond, Virginia, PFG and our family of companie...
Sysco
1390 Enclave Parkway, Houston, 77079, US
Last Update: 15/09/2026
Sysco is the global leader in selling, marketing and distributing food and related products to customers who prepare meals away from home. This includes restaurants, healthcare and educational facilities, lodging establishments, entertainment venues, and more. Sysco ope...
Compliance Ranges Comparison
Performance Food Group
Sysco
Benchmark & Cyber Underwriting Signals
Incidents vs Food and Beverage Services Industry Avg (This Year)
No incidents recorded for Performance Food Group in 2026.
Incidents vs Food and Beverage Services Industry Avg (This Year)
Sysco has 194.12% more incidents than the average of all companies with at least one recorded incident.
Incident History - Performance Food Group (X = Date, Y = Severity)
Performance Food Group cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Sysco (X = Date, Y = Severity)
Sysco cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
Performance Food Group
Sysco
FAQ
Latest Global CVEs
Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing.
Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory.
Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.
Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.
Mistral Vibe before 2.25.5 contains a remote code execution vulnerability in the worktree creation process that executes git hooks before trust validation. Attackers can supply a repository with a crafted post-checkout hook that executes arbitrary shell commands with the privileges of the user running Vibe.
- https://github.com/mistralai/mistral-vibe
- https://github.com/mistralai/mistral-vibe/blob/19b5b74faa78d0816b8d4d4c7d7543fc3520678c/vibe/core/git/repo.py#L411-L431
- https://github.com/mistralai/mistral-vibe/commit/c069ffa1e12fb5f2487b489217c40ab97721d553
- https://github.com/mistralai/mistral-vibe/issues/996
- https://github.com/mistralai/mistral-vibe/releases/tag/v2.25.5
- https://www.vulncheck.com/advisories/mistral-vibe-before-2.25.5-remote-code-execution-via-git-post-checkout