What exploited vulnerabilities have in common: A data-driven analysis of real-world attacks

Real-world exploitation concentrates in a small, high-impact subset of CVEs, according to a Microsoft analysis of real-world attacks. Microsoft says defenders can prioritise vulnerabilities based on exploitation likelihood, exposure and potential blast radius.