2021 Year End Report | Vulnerability QuickView

Conducted by Brian Martin, Vice President of Vulnerability Intelligence at Risk Based Security (RBS) and Flashpoint’s Global Threat Intelligence Team, this year’s annual report from RBS provides a full picture of the 2021 vulnerability landscape. The number of vulnerabilities has increased by a noticeable margin and 2021 can now be credited with the most disclosures on record.

Some notable findings from this year’s report include:

• 28,695 vulnerabilities were disclosed in 2021, the highest number on record.
• Of the vulnerabilities disclosed, 29% do not have a CVE ID, while an additional 4% have a CVE ID assigned but are in RESERVED status. This means that no actionable information about the vulnerability is yet available in the National Vulnerability Database (NVD).
• 4,108 vulnerabilities disclosed were remotely exploitable and included both a documented public exploit and a solution available to remediate it. Organizations can potentially reduce their risk and immediate workload by nearly 86% by prioritizing these vulnerabilities.