Google Reports 90 Zero-Day Vulnerabilities Exploited in 2025

Google’s Threat Intelligence Group (GTIG) tracked 90 zero-day vulnerabilities that were actively exploited in attacks during 2025. Nearly half of these zero-days targeted enterprise software and appliances. The report did not specify exact products, vendors, or CVE identifiers for the vulnerabilities. The data reflects observed exploitation activity rather than all disclosed zero-days for the year. No additional technical impacts or attack vectors were detailed in the available content.