2025 Supply Chain Vulnerability Report

Over 4,400 of the disclosed CVEs in 2024 were classified as critical (CVSS 9.0+).

Over 20,000 of the disclosed CVEs in 2024 had a CVSS score of 7.0 or higher.

There was a 38% year-over-year increase in published CVEs.

Over 40,000 CVEs were disclosed in 2024.

A significant portion of vulnerabilities were weaponized within days of disclosure.

Many of 2024's most exploited vulnerabilities were found in widely used third-party software rather than internally developed applications