NIST logged more than 18,000 vulnerabilities in 2020, over 10,000 of which were critical or high severity ‘ an all-time high. Redscan’s analysis looks beyond severity scores, detailing the rise of low complexity vulnerabilities as well as those which require no user interaction to exploit. However, there are also positive trends, such as a decrease in CVEs that require no privileges to exploit – a drop in the percentage of vulnerabilities requiring no user privilege to exploit are on the decline (from 71% in 2016 to 58% in 2020)
Source: https://www.helpnetsecurity.com/2021/02/17/cves-2020/