Comparison Overview
Viatris

Viatris
Pittsburgh, US
Last Update: 04/04/2026
Viatris Inc. (NASDAQ: VTRS) is a global healthcare company uniquely positioned to bridge the traditional divide between generics and brands, combining the best of both to more holistically address healthcare needs globally. With a mission to empower people worldwide to ...

Sandoz
Novartis Campus, Basel, Basel-Stadt, CH, 4056
Last Update: 30/03/2026
Sandoz is the global leader in generic and biosimilar medicines. Our Purpose is to pioneer access to medicines for patients globally. We are on a mission to drive innovation in the healthcare industry by freeing up resources sustainably and responsibly while continu...
Compliance Ranges Comparison

Viatris







Sandoz






Benchmark & Cyber Underwriting Signals
Incidents vs Pharmaceutical Manufacturing Industry Avg (This Year)
No incidents recorded for Viatris in 2026.
Incidents vs Pharmaceutical Manufacturing Industry Avg (This Year)
No incidents recorded for Sandoz in 2026.
Incident History - Viatris (X = Date, Y = Severity)
Viatris cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Sandoz (X = Date, Y = Severity)
Sandoz cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

Viatris

Sandoz
FAQ
Latest Global CVEs
Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network.
Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network.
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.
Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute code over a network.