2024 Trends in Vulnerability Exploitation

1% of the CVEs published were reported publicly as exploited in the wild.

768 CVEs were publicly reported as exploited in the wild in 2024, a 20% year-over-year increase.

There were over 100 unique sources that were the first to report a CVE.

23.6% of Known Exploited Vulnerabilities (KEVs) were known to be exploited on or before the day their CVEs were publicly disclosed.

Exploited CVEs ranged from 30-50 per month, with spikes during April/May due to increased reports during RSA and end-of-quarter reports.