Comparison Overview
S&P Global

S&P Global
55 Water Street, New York, 10041, US
Last Update: 28/04/2026
S&P Global (NYSE: SPGI) enables businesses, governments, and individuals with trusted data, expertise and technology to make decisions with conviction. We are Advancing Essential Intelligence through world-leading benchmarks, data, and insights that customers need in or...

Merrill Lynch
2 World Financial Center, New York, 10281, US
Last Update: 03/04/2026
Founded in 1914, Merrill is one of the largest wealth management businesses in the world. Merrill financial advisors combine financial knowledge and experience with a deep understanding of their clients’ needs to help their clients pursue the lives they want. With a dee...
Compliance Ranges Comparison

S&P Global







Merrill Lynch






Benchmark & Cyber Underwriting Signals
Incidents vs Financial Services Industry Avg (This Year)
S&P Global has 44.13% fewer incidents than the average of same-industry companies with at least one recorded incident.
Incidents vs Financial Services Industry Avg (This Year)
No incidents recorded for Merrill Lynch in 2026.
Incident History - S&P Global (X = Date, Y = Severity)
S&P Global cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Merrill Lynch (X = Date, Y = Severity)
Merrill Lynch cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

S&P Global

Merrill Lynch
FAQ
Latest Global CVEs
An issue in the SBN UDP interface of NASA cFS v7.0.1 allows attackers to cause a Denial of Service (DoS) via transmitting a crafted SBN frame.
A stack-based buffer overflow vulnerability exists in the cmd_edl function of OreSat Firmware v1.0. The vulnerability is triggered when processing the edl fw_flash command, where the <filename> argument is copied to a 64-byte stack buffer via memcpy without proper length validation. An attacker with physical access to the UART3 serial interface can exploit this vulnerability by sending a maliciously crafted command with an oversized filename parameter,
Adobe Campaign Classic (ACC) is affected by a Violation of Secure Design Principles vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction.
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain elevated privileges. Exploitation of this issue does not require user interaction.
Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.