Only 5.5% of all vulnerabilities are ever exploited in the wild

Most vulnerabilities that are exploited in the wild have a CVSS severity score of 9 or 10.