Some of the exploited software vulnerabilities come from companies like Microsoft, Apache and VMware.