2024 Trends in Vulnerability Exploitation

23.6% of Known Exploited Vulnerabilities (KEVs) were known to be exploited on or before the day their CVEs were publicly disclosed.

768 CVEs were publicly reported as exploited in the wild in 2024, a 20% year-over-year increase.

1% of the CVEs published were reported publicly as exploited in the wild.

There were over 100 unique sources that were the first to report a CVE.

Exploited CVEs ranged from 30-50 per month, with spikes during April/May due to increased reports during RSA and end-of-quarter reports.