2025
Vulnerability Stats
It's February 21 and 6,406 vulnerabilities have been published in 2025.
This marks an increase of 49% compared to this time last year.
The vulnerability statistics page is updated daily and is designed to be easily screenshotable and shareable.
2025
Vulnerability Breakdown
- CRITICAL
- 491
- HIGH
- 1,997
- MEDIUM
- 3,011
- LOW
- 160
Plus 744 vulnerabilities yet to be given a severity rating.
2025 Vulnerability Severity By Month

123
New vulnerabilities every day in 2025
Each day your organisation needs to check and patch 123 vulnerability.
Across 1000's of devices!
Vulnerabilities Trending in 2025
Top 10 Trending Vulnerabilities for 2025
Stack-Based Buffer Overflow in Ivanti Connect S...
Remote Attackers Can Gain Super-Admin Privilege...
Authorization Issue in iPadOS and iOS by Apple
Authentication Bypass in Palo Alto Networks PAN...
Windows OLE Remote Code Execution Vulnerability...
Mark-of-the-Web Bypass Vulnerability in 7-Zip b...
Windows Kernel Memory Information Disclosure Vu...
Use After Free Vulnerability in Apple VisionOS ...
SQL Injection Vulnerability in PostgreSQL libpq...
Reloader Vulnerability: Execution of Unsigned S...
Pareto Principle
The 80/20 Rule
The Pareto principle states that for many outcomes, roughly 80% of consequences come from 20% of causes.
In the world of Vulnerability Management, only a small amount of CVEs introduce the majority of risk.
Tracking CVEs that generate vibrant conversation gives us a tool to reliability identify the most important vulnerabilities.
2016 - 2025 Vulnerability Severity By Year

More Vulnerabilities
Means more Exploits
Which means more Ransomware
Vulnerability Arrivals ๐
Vulnerabilities are not published in a predictable way. Every day is a vulnerable day ๐คจ
Vulnerability Published Matrix for 2025
Vulnerability Published Matrix for 2024
Vendor Breakdown
Wonder if your vendors are doing a good job? ๐ค
Vulnerability Weighted Impact by Vendors
Impact is the sum of the CVSSv3 base score for all vulnerabilities by vendor.
WordPress
408 Vulnerabilities
112 Exploited ๐พ
Microsoft
232 Vulnerabilities
16 Exploited ๐พ
IBM
171 Vulnerabilities
2 Exploited ๐พ
Linux
122 Vulnerabilities
Apple
104 Vulnerabilities
4 Exploited ๐พ
Google
89 Vulnerabilities
Oracle
83 Vulnerabilities
1 Exploited ๐พ
Fortinet
67 Vulnerabilities
2 Exploited ๐พ
Intel
66 Vulnerabilities
Adobe
65 Vulnerabilities