Following vulnerabilities are known to have been exploited the most in 2018. Despite available patches or updated versions, most users failed to apply the updates and were reportedly attacked by threat actors in 2018.
Remote Code Execution
Multiple Malware injection
Multiple Exploit kits
Most of these vulnerabilities have been exploited despite available patches because users failed to update the affected products. It is strongly recommended to apply patches for all the above mentioned vulnerabilities or update these products to the latest up-to-date version available.