Report by Action1
2026 Software Vulnerability Ratings Report
Key Findings
In 2025, macOS vulnerabilities increased by more than 1,000% across enterprise environments.
In 2025, privilege escalation vulnerabilities in security software jumped 107%.
In 2025, vulnerabilities in security software rose 39%.
Total disclosed software vulnerabilities in enterprise environments increased 92% year-over-year in 2025.
Remote code execution (RCE) vulnerabilities surged 128% year-over-year in 2025.
In 2025, macOS privilege escalation vulnerabilities increased 5,600%.
In 2025, network infrastructure critical vulnerabilities increased 235%.
Enterprise application exploitation surged 800% in 2025, making ERP, CRM, collaboration, and operational business platforms top targets.
In 2025, network infrastructure remote code execution (RCE) vulnerabilities rose 238%.
In 2025, network infrastructure elevation-of-privilege (EoP) vulnerabilities surged 266%.
In 2025, browser privilege escalation vulnerabilities surged 183%.