2025
Vulnerability Stats

It's March 26 and 10,885 vulnerabilities have been published in 2025.

This marks an increase of 41% compared to this time last year.

The vulnerability statistics page is updated daily and is designed to be easily screenshotable and shareable.

2025
Vulnerability Breakdown

CRITICAL
823
HIGH
3,414
MEDIUM
5,110
LOW
298

Plus 1,237 vulnerabilities yet to be given a severity rating.

2025 Vulnerability Severity By Month

Exploit Logo

128

New vulnerabilities every day in 2025

Each day your organisation needs to check and patch 128 vulnerability.

Across 1000's of devices!

Vulnerabilities Trending in 2025

Top 10 Trending Vulnerabilities for 2025

Authorization Bypass in Next.js Framework by Ve...

CVE-2025-29927
VercelNext.js👾9.1CRITICAL

Stack-Based Buffer Overflow in Ivanti Connect S...

CVE-2025-0282
IvantiConnect Secure👾9CRITICAL

Remote Attackers Can Gain Super-Admin Privilege...

CVE-2024-55591
FortinetFortiOS👾🟣9.8CRITICAL

Authorization Issue in iPadOS and iOS by Apple

CVE-2025-24200
AppleiPad OS👾6.1MEDIUM

Authentication Bypass in Palo Alto Networks PAN...

CVE-2025-0108
Palo Alto NetworksCloud Ngfw👾🟣5.9MEDIUM

SSRF Vulnerability in Axios HTTP Client for Bro...

CVE-2025-27152
AxiOSAxiOS7.7HIGH

Windows OLE Remote Code Execution Vulnerability...

CVE-2025-21298
MicrosoftWindows 10 Version 1809👾9.8CRITICAL

Spoofing Vulnerability in Microsoft Windows Fil...

CVE-2025-24071
MicrosoftWindows 10 Version 1809👾7.5HIGH

Mark-of-the-Web Bypass Vulnerability in 7-Zip b...

CVE-2025-0411
7-zip7-zip👾7HIGH

Remote Code Execution and Information Disclosur...

CVE-2025-24813
ApacheApache Tomcat👾9.8CRITICAL

Pareto Principle
The 80/20 Rule

The Pareto principle states that for many outcomes, roughly 80% of consequences come from 20% of causes.

In the world of Vulnerability Management, only a small amount of CVEs introduce the majority of risk.

Tracking CVEs that generate vibrant conversation gives us a tool to reliability identify the most important vulnerabilities.

2016 - 2025 Vulnerability Severity By Year

Exploit Logo

More Vulnerabilities

Means more Exploits

Which means more Ransomware

Vulnerability Arrivals 📆

Vulnerabilities are not published in a predictable way. Every day is a vulnerable day 🤨

Vulnerability Published Matrix for 2025

Vulnerability Published Matrix for 2024

Vendor Breakdown

Wonder if your vendors are doing a good job? 🤔

Vulnerability Weighted Impact by Vendors

Impact is the sum of the CVSSv3 base score for all vulnerabilities by vendor.