Zero Day Clock

The gap between vulnerability disclosure and exploitation is collapsing to zero.

Median TTE 2018

63.0d

Median TTE 2023

0.8d

Median TTE 2025

3.6h

Exploited ≤24h (Last 12m)

57.7%

CVE-Exploit Pairs Tracked

6,079

Median Time-to-Exploit

zerodayclock.com

Projected Milestones

When 50% of exploited vulnerabilities will be weaponized within:

1 Day

~2028

1 Hour

~2037

1 Minute

~2049

Fastest Exploited CVEs

1

CVE-2025-48461

Successful exploitation of the vulnerability could

MEDIUM< 1h
2

CVE-2025-43929

open_actions.py in kitty before 0.41.0 does not as

HIGH< 1h
3

CVE-2025-26198

CloudClassroom-PHP-Project v1.0 contains a critica

CRITICAL< 1h
4

CVE-2024-50340

symfony/runtime is a module for the Symphony PHP f

HIGH< 1h
5

CVE-2025-2807

The Motors – Car Dealership & Classified Listings

HIGH< 1h