Exploited CVEs ranged from 30-50 per month, with spikes during April/May due to increased reports during RSA and end-of-quarter reports.

February 1, 2025

Exploited CVEs ranged from 30-50 per month, with spikes during April/May due to increased reports during RSA and end-of-quarter reports. — This cybersecurity statistic was published by VulnCheck in February 2025. The original data appears in 2024 Trends in Vulnerability Exploitation . For the full methodology and detailed findings, refer to the original report.

Source

View Original Report

Published on 2/1/2025

Share or Copy this stat

Frequently Asked Questions

What does this statistic say?

Exploited CVEs ranged from 30-50 per month, with spikes during April/May due to increased reports during RSA and end-of-quarter reports. This data was published by VulnCheck.

Where does this data come from?

This statistic comes from 2024 Trends in Vulnerability Exploitation , published by VulnCheck on February 1, 2025. You can view the original report at https://vulncheck.com/blog/2024-exploitation-trends.

What cybersecurity topics does this cover?

This statistic was published by VulnCheck. Browse more statistics from VulnCheck.

CYBERSTATS

Exploited CVEs ranged from 30-50 per month, with spikes during April/May due to increased reports during RSA and end-of-quarter reports.

Source

Share or Copy this stat

Frequently Asked Questions

Want More Statistics Like This?

Related Statistics

26.9% of KEVs first seen in 1H-2025 were still awaiting analysis by NIST.

In 2H-2024, 66 KEVs were attributed to the Chinese threat actor Flax Typhoon (AKA Ethereal Panda).

In 1H-2025, 29 KEVs were attributed to Iranian threat actors.

The countries with the largest number of active threat actor groups are: China: 20 groups, Russia: 11 groups, North Korea: 9 groups, and Iran: 6 groups.

4.4% of KEVs are in a deferred status by NIST, meaning they are no longer maintained or updated

32.1% of vulnerabilities (Known Exploited Vulnerabilities - KEVs) had exploitation evidence on or before the day of their CVE disclosure, often indicating zero-day exploitation. This marks an 8.5% increase in the percentage of KEVs exploited on or before disclosure compared to 23.6% in 2024.

Stay Ahead of Cyber Threats