The most popular applications to attack are back-up and antivirus software, and applications make up nine of the top 20 threats, the highest ever number.
The data was compiled with figures from the UK's National Infrastructure Security Co-Ordination Centre, the US Department of Homeland Security's Computer Emergency Response Team (US-Cert) and Canada's Cyber Incident Response Centre.
"These include back-up software, antivirus software, database software and even media players. Flaws in these programs put critical national and corporate resources at risk and have the potential to compromise the entire network."
While the focus of much security work has been on patching operating system flaws, less attention is typically paid to application patching since there are many more applications than operating systems in a company.
Jerry Dixon, director of US-Cert, confirmed that these vulnerabilities are being actively targeted by criminals.
"US-Cert received reports of important system compromises using v ulnerabilities in back-up products within a few days of the public disclosure of vulnerabilities in those products," he said.
Would you settle for door locks or invest in a burglar alarm too?
Australian government to require technology and communications companies to provide access to messages
New bill avoids demanding 'backdoors' in encryption, but includes measures to compel companies to provide access to encrypted communications
Indonesian overclocker Ivan Cupa (with the aid of a lot of liquid nitrogen) achieves record overclock on AMD's latest Threadripper
Ssupermassive black hole is so big it corresponds to four per cent of the galaxy's total mass