Google Tracked 75 Zero-Days in 2024

Google’s Threat Intelligence Group on Tuesday published its analysis of zero-day vulnerability exploitation for 2024.

A zero-day is a vulnerability that has been exploited in the wild before a patch was released to the public. This is the definition used by Google and many others in the industry, but some individuals and cybersecurity companies have different definitions, in some cases referring to any new vulnerability — even if it has not been exploited — as a zero-day.

The internet giant reported tracking 75 zero-day vulnerabilities in 2024, a decrease from the 98 observed in 2023, but still more than the 63 spotted in 2022.

Of the 75 zero-days seen last year, 33 impacted enterprise technologies such as networking and security products, while the rest affected end-user products such as browsers, operating systems and mobile devices.

In the case of end-user products, Google observed an increase in Windows exploits and a significant ...