Per CVE year, the share of CVEs that have at least one exploitation sighting (type 'exploited' or 'published-proof-of-concept') over the total number of published CVEs for that year. Useful to track whether the proportion of exploited vulnerabilities evolves over time, independently of the raw discovery volume. Note: recent years are undercounted, as sightings accumulate over time.