Seven months into Project Glasswing, VulnCheck has tracked 442 Anthropic-attributable CVEs—about 0.5% of all CVEs published this year—with only two exploited in the wild. Of 37,966 reported findings, just 7,349 (19.4%) are public and only 217 have been marked fixed.