As numerous as 159 CVE identifiers have been identified as being actively exploited in the environment during the initial quarter of 2025, an increase from 151 in Q4 2024.
“We persist in observing vulnerabilities being utilized at an accelerated rate, with 28.3% of vulnerabilities being exploited within one day of their CVE announcement,” VulnCheck mentioned in a document distributed to The Hacker News.
This equates to 45 security weaknesses that have been weaponized.