We are also releasing VulnCheck proprietary data on public exploit code, CVE severity, and in-the-wild usage by a variety of threat actors for each Routinely Exploited Vulnerability. Counts below also include unattributed threat activity curated by our vulnerability intelligence team. All unattributed activity collectively, in any category, is counted as one (1) threat actor, ransomware, or botnet instance in our calculations. If multiple vulnerabilities had similar threat profiles across key areas, our team also considered the breadth of real-world exploitation sources, honeypot exploit attempt volume over time, and attack indicators from VulnCheck Canaries when compiling our analysis.