News, tips, advice, support for Windows, Office, PCs & more
Home icon Home icon Home icon Email icon RSS icon

We're community supported and proud of it!

  • Microsoft and Oracle lead in number of CVEs

    Home Forums Code Red – Security/Privacy advisories Microsoft and Oracle lead in number of CVEs

    Viewing 2 reply threads
    • Author
      • #2306676
        AskWoody Plus

        Microsoft and Oracle lead in number of CVEs with 7000 CVEs

        Google, IBM, Apple & Debian follow…

        Tech Monitor analysis of 123,413 unique software vulnerabilities (“Common Vulnerabilities and Exposures”, or CVEs) dating back almost two decades reveals a rising tsunami of bugs – an increasingly critical challenge for IT leaders in the face of ever-more professionalised and well-resourced cybercrime syndicates that are capable of reverse-engineering patches to exploit such flaws in a highly condensed timescale.

        In 2016 just 5,579 bugs were allocated CVEs (an open standard that provides identifiers for cybersecurity vulnerabilities). By 2019 the figure had hit 13,988. It is on track to climb above 20,000 in 2020….

        It is interesting to find Adobe only in the 16th place.

        • This topic was modified 6 months, 2 weeks ago by Alex5723.
      • #2307350
        Paul T
        AskWoody MVP

        I suspect those figures reflect the increasing number of people looking for security issues rather than an increase in “bad programming”, especially given the amount of reused code in something like Windows.

        It does suggest that Oracle have not paid sufficient attention to their software as you would expect database software to be less complex than an operating system.

        cheers, Paul

      • #2307378

        Analysis of individual “products” shows that Linux is ahead with 4,111 vulnerabilities, … (Various editions of Windows are classed separately – when added together they would total 3,453, coming in second place.)

    Viewing 2 reply threads

    Please follow the -Lounge Rules- no personal attacks, no swearing, no politics or religion.

    Reply To: Microsoft and Oracle lead in number of CVEs

    You can use BBCodes to format your content.
    Your account can't use Advanced BBCodes, they will be stripped before saving.