Top 50 vendors and products by security vulnerabilities

Writer: Rebecca Moody

Head of Data Research

Updated: December 7, 2020

With the help of CVE Details security vulnerability database, we’ve tracked the number of distinct vulnerabilities across the top 50 vendors and products from 1999 to 2019.

More than 64,000 vulnerabilities have been logged across the top 50 vendors and over 73,000 across the top 50 products.

Which brands and products have had the most distinct vulnerabilities?

We take a look below.

Top 50 vendors for security vulnerabilities

Microsoft has had the most security vulnerabilities since 1999, with just over 6,700, followed by Oracle with 5,500 and IBM with 4,600.

The biggest spike in vulnerabilities can from Debian in 2018 with 1,200 logged. In fact, 2018 saw the biggest number of vulnerabilities across the top 50 vendors with a 19.3 percent increase on 2017. Figures reduced again in 2019 with a 34 percent drop year on year.

Top 50 products for security vulnerabilities

Debian Linux has had the most security vulnerabilities since 1999, with nearly 3,000 followed by Google Android with 2,500 and Linux Kernel with 2,300.

In 2018, Debian Linux saw the biggest spike in security vulnerabilities with 1,197.

Top 50 vendors with security vulnerabilities - year by year figures

Vendor	1999	2000	2001	2002	2003	2004	2005	2006	2007	2008	2009	2010	2011	2012	2013	2014	2015	2016	2017	2018	2019	Total
Microsoft	172	143	173	243	104	148	166	267	259	237	236	317	253	172	345	374	568	491	698	712	668	6746
Oracle	4	11	34	55	18	30	79	158	131	120	157	207	224	380	505	472		801	876	756	489	5507
IBM	22	16	59	43	33	54	81	91	133	147	172	202	169	175	390	456	316	381	683	619	364	4606
Google											45	154	294	280	191	158	318	700	1001	790	609	4540
Apple	7		12	23	47	66	148	138	209	213	218	303	255	311	199	308	708	328	593	188	229	4503
Cisco	21	16	55	65	27	36	54	69	111	90	109	155	167	160	433	368	490	353	491	443	440	4153
Adobe				7			16	31	35	64	95	207	202	146	148	138	483	548	353	385	441	3299
Redhat	40	48	49	23	37	48	101		39	37	17	40	35	57	200	224	241	267	180	823	257	2763
Debian	27	16	33	8	12	24	60	23	24	68	19	17		24	92	132	247	336		1200	360	2722
Linux	19	5	22	15	19	51	133	90	62	76	102	124	86	116	189	131	86	218	454	178	170	2346
Mozilla			10	30	13	59	93	122	88	100	143	121	116	204	160	120	189	143		360	118	2189
Canonical								14	21	43	11	15			92	150	266	288	167	736	197	2000
HP	17	36	47	57	42	29	36	39	65	69	78	119	143	84	143	110	106	114		231	129	1694
SUN	54	26	57	57	64	55	75	86	116	157	218	90	114	112	175	30	15					1501
Opensuse														48	138	154	293	327	109	82	148	1299
Apache	8	9	16	32	25	24	24	17	44	24	35	43	44	61	74	91	57	102	215	158	108	1211
Opera									17	34	28	39	56	32	21		605					832
Fedoraproject															31	71	143	125	100	71	187	728
GNU	4	14	12	19	15	39	48	22	17	20	13	18	26		23	45	28	22	197	80	55	717
Novell	8	8	9	22	16	20	34	45	27	41	24	44	81	31	45		61	90				606
Qualcomm		6	8	8	6															376	171	575
PHP				14	11		18	43	116	21	22	35	37	22	13	33	28	106	44			563
Wireshark								14	25	23	25	15	31	46	82	29	33	95	58	79		555
D-link																	15		456	54		525
SAP					12	11		13	17			15			26	83	54	54	50	115	75	525
Huawei																	13	100	181	193		487
Imagemagick																			357	71	57	485
Foxitsoftware																			67	247	162	476
Jenkins																19	19			161	254	453
Symantec	5	8	6	22	9	28	19	41	45	31	28	14	17	50	23	29	33	37				445
Suse	18	18	21	9		33	82								18	39	43	92	43			416
Cpanel								13													321	334
EMC													21	30	49	62	77		73			312
Juniper															27	47	32	21	86	55	34	302
Moodle						11		17			16	11		95	42	48	25	37				302
Siemens														42	38	33	36	37		53	62	301
Joomla								51	59	96	25	10	16	25			13					295
Wordpress								16	48	55	14		12	32	20	29		20	43			289
Netapp																			44	119	112	275
McAfee					5		17		12					45		32	24		58	44	34	271
Ffmpeg												11	13	54	77	19	29	20	47			270
Drupal								37	35	70	52	8			14	34		19				269
Vmware									25	31	20	24	18	34	18		15	36	45			266
Freebsd	18	27	36	31	14	15	17	27		15	11	8	10		13							242
Qemu																36		91	65	38		230
F5																		23	52	88	63	226
XEN														35	42		41	28	62			208
Phpmyadmin							21	13	17	11		10	17		17	20		76				202
Mysql						10	21	15	14				16	58	42	22						198
Trend Micro	6		17	7					21	20									66	59		196

Top 50 products with security vulnerabilities - year by year figures

Vendor	Product Name	1999	2000	2001	2002	2003	2004	2005	2006	2007	2008	2009	2010	2011	2012	2013	2014	2015	2016	2017	2018	2019	Total
Debian	Debian Linux	27	16	31		10	17	47	21	19						85	108	241	335	448	1197	360	2962
Google	Android																	125	525	843	613	414	2520
Lin	Linux Kernel	19	5	22	15	19	51	133	90	62	71	102	123	83	115	189	130	86	217	454	177	170	2333
Apple	Mac Os X				20	25	54	96	106	110	95	81	97	74	37	72	150	444	217	300		117	2095
Ubuntu	Ubuntu Linux							45	13	21	43					92	147	265	286	164	736	190	2002
Google	Chrome											39	150	266	249	174	127	187	172	153	161	177	1855
Mozilla	Firefox						22	75	101	77	93	126	106	101	163	149	108	179	133		333		1766
Apple	Iphone OS											27	32	37	112	96	122	387	164	387		156	1520
Microsoft	Windows 7												64	102	44	99	35	149	134	229	162	250	1268
Microsoft	Windows Server 2008										22	79	92	105	50	103	38	151	133	243		248	1264
Adobe	Acrobat Dc																	104	227	209	299	342	1181
Adobe	Acrobat Reader Dc																	104	227	209	299	342	1181
Microsoft	Windows 10																	57	172	268	257	357	1111
Microsoft	Windows Server 2012															52	38	155	156	235	163	246	1045
Adobe	Flash Player										21	20	60	63	66	56	76	329	266	71			1028
Redhat	Enterprise Linux Desktop						20	55										74	141	86	484	121	981
Redhat	Enterprise Linux Server																29	77	141	88	511	125	971
Microsoft	Windows 8.1																36	150	154	225	164	242	971
Redhat	Enterprise Linux Workstation																	74	141	76	493	123	907
Opensuse	Opensuse														48	137	150	269	236	61			901
Microsoft	Internet Explorer										38	32				128	243	231	129	79			880
Adobe	Acrobat											45	65	59	28	64	43	137	224	210			875
Apple	Safari							17		42	37	73	121	49	90		72	135	56	179			871
Microsoft	Windows Server 2016																			251	242	357	850
Microsoft	Windows Vista									35	37	76	86	95	42	95	33	137	127	64			827
Mozilla	Thunderbird						13		65	16	50	39	61	68	148	113	64				175		812
Microsoft	Microsoft Xp			10	34	22	44	66	56	39	40	89	98	101	43	87							729
Microsoft	Windows Rt 8.1																29	138	140	159		235	701
Mozilla	Seamonkey								70	36	70	55	82	67	147	104	55						686
SUN	Solaris	34	7	27	33	42	30	30	44		43	63	21				65	164	76				679
Microsoft	IE	39	19	34	54	25	59	37	92	75	26	27	59	48	23								617
Mozilla	Firefox Esr														116	100	57	95	72		176		616
Fedoraproject	Fedora																68	139	124	94		184	609
Apple	Mac OS X Server					14	42	72	55	52	83	83	104	67	31								603
Adobe	Acrobat Reader										17	45	68	60	30	66	41	137		116			580
Redhat	Enterprise Linux					9	30	75		25						78	36	52	62		174		541
Oracle	JRE														59	180	115	80		69			503
Microsoft	Edge																		135	202	161		498
Opensuse	Leap																		265	86		146	497
Microsoft	Windows 2000	17	31	43	42	31	41	68	42	30	30	77	45										497
Oracle	JDK														48	180	115	80		69			492
Oracle	Mysql														65	66	64	77	101	85			458
SUN	Sunos	45	8	33	35	40	27	20	21	21	17			43	62	41	29						442
Apple	Itunes													78	111	36		101		104			430
PHP	PHP				13	11		17	33	114	20	22	35	35	22				106				428
Wireshark	Wireshark								14	25	23	25		31	46	82	29		95	58			428
SUN	JRE									20	51	44	54	57	47	130							403
Microsoft	Windows 2003 Server					11	35	58	45	31	20	38	72	85									395
SUN	JDK									17	50	34	54	58	36	131							380
Qualcomm	Sd 625 Firmware																				235	145	380

Top 50 vendors and products by security vulnerabilities

Top 50 vendors for security vulnerabilities

Top 50 products for security vulnerabilities

Top 50 vendors with security vulnerabilities - year by year figures

Top 50 products with security vulnerabilities - year by year figures

Writer:

Rebecca Moody

Comments

Leave a Reply Cancel reply