Dozens of zero-day flaws exist for exploit daily, report says

On any given day cybercriminals and nation states are in possession of as many as 100 zero-day software exploits known only to them, NSS Labs has calculated using the commercial vulnerability market as a baseline.

NSS Labs research director Dr. Stefan Frei reached this startling conclusion after studying at up to ten years’ worth of software vulnerability data from the two firms that pioneered the market for purchasing flaws from researchers, iDefense (which started its program in 2002) and TippingPoint (which started in 2005 and is now owned by Hewlett-Packard).