CVEs Surge 30% in 2024, Only 0.91% Weaponized

Qualys' 2024 midyear review reports a 30% increase in disclosed CVEs (22,254) with 0.91% (204) weaponized; these weaponized flaws—including older CVEs—are driving significant risk through ransomware and other malware campaigns, particularly via public-facing applications and remote services, and the report urges prioritizing actively exploited vulnerabilities and improved vulnerability management.