Q2 CVE counts hit all-time highs — and AI is now the reason
Kaspersky's Q2 report shows registrations of new CVEs and critical (CVSS>9.0) bugs surging to record levels, driven by AI-assisted vulnerability research and AI-generated code. Entire new bug classes emerged — Dirty Frag flaws in the Linux kernel, and over 200 CVEs in the OpenClaw AI project alone. Researchers also began publishing Windows exploits before CVE registration or patches, a newly broken norm.