Most vulnerabilities are known; defenders need a better way to know which ones pose an imminent threat.
