Software vulnerabilities already outnumber last year’s crop