We're here trying to visualize the time it takes in average for an exploit to be published for a given vulnerability. Currently the only source of exploit information we use as a basis for the statistics are those published by FrSIRT (a.k.a. K-OTik). For each exploit published by FrSIRT, we corrolate the information with the National Vulnerability Database (maintained by NIST) to be able to calculate the time-to-exploit (T2E) value. The T2E value represents the number of days between the time a given vulnerability is made public and the time of the release of an exploit for that vulnerability.

To get a better overall picture we display the average "time to exploit" based on all the available data in our database, however since the calculation of the average value is strongly biased by peak values we also calculate the median value. The median value is more correct for this type of dataset.

The chart and table on this page only shows the 20 most recent exploits. Click on the "T2E Category Charts" tab on the menu to get more customized views.

To date, a total of 29 exploits have been processed. Of these 16 have been marked as "Critical".