CYBERSECURITYTRACKER
Permanent story citation

Exploited Vulnerabilities Typically Take Three Months to Patch, Moody’s Finds

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 10668

As cited

Copy frozen at (site build).

vulnerabilities

Exploited Vulnerabilities Typically Take Three Months to Patch, Moody’s Finds

Moody's research found that vulnerabilities with known exploits remain unpatched for a median duration of 87 days. This lag exposes organizations to active threat activity during a critical window after exploit code becomes available.

Why it matters: Security and infrastructure teams must prioritize patching of known-exploited vulnerabilities within days, not weeks, to minimize the window where attackers actively use published exploits against your systems.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary