If you're just talking about security bugs.
There are also non security bugs that don't have exploits but just make the user experience worse.