Google Threat Intelligence

OSs, including both desktop and mobile, were the most exploited product category in 2025, accounting for 44% (39) of all zero-days.

Browsers accounted for less than 10% of 2025 zero-day exploitation.

In 2025, Google Threat Intelligence Group attributed the exploitation of 9 zero-days to confirmed or likely financially motivated threat groups.

In 2025, 52% (47) of the tracked zero-days were used to exploit end-user platforms and products.

15 mobile zero-days were discovered in 2025.

48% of 2025’s zero-days targeted enterprise-grade technology.

Google Threat Intelligence Group (GTIG) tracked 90 zero-day vulnerabilities exploited in-the-wild in 2025.