Skip to content

Security 1 min read 42 words

time-to-exploit for newly disclosed vulnerabilities collapsed

Medium importance

The short versionThe median time-to-exploit for newly disclosed vulnerabilities collapsed from 63 days in 2018 to just 5 days in 2025.

  • 63days
  • 5days
  • 32days

The median time-to-exploit for newly disclosed vulnerabilities collapsed from 63 days in 2018 to just 5 days in 2025. Organizations still take a median of 32 days to patch, which means the average critical vulnerability sits exposed for nearly a month after attackers have already weaponized it.

Another memory RSS

More on security