The Shadowserver Foundation put the figure at around 87,000 for a vulnerability rated as critical and first discovered in February.