Vulnerabilities in this market retain their peak value when very few people know about them; value decreases through events such as vendor notification, information leaks, independent rediscovery, or accidental discovery of the vulnerability due to attack activity in the wild.