Today, even small businesses and organizations are not spared attacks on vulnerable systems
PRAGUE, April 4, 2024 – GFI Software, a provider of security and management solutions for enterprise networks, stated that according to current data from the CVE catalog of identified vulnerabilities, a record 29,065 vulnerabilities were discovered last year, 12.6% more than in 2022. Google, Microsoft and Adobe ranked among the vendors with the highest number of vulnerabilities, while operating systems, especially mobile ones, remain the most at-risk software.
While a total of 25,083 vulnerabilities emerged in 2022, last year saw a further increase. Their severity is also growing, with the number of so-called critical vulnerabilities increasing in 2023 as well. The average severity of all vulnerabilities over the past 10 years reached a score of 7.6 out of a maximum of 10, with approximately every fifth vulnerability being critical.
Last year, Google became the software vendor with the highest number of vulnerabilities, with its Android system retaining first place among the most vulnerable software products. Microsoft, Adobe, Apple and Oracle followed. Among operating systems, in addition to Google Android (1,422), the highest numbers of vulnerabilities were identified in Windows (782), macOS (418), Linux Kernel (311) and Apple iOS (269). Among well-known applications, the most vulnerabilities were discovered in Google Chrome (296), Mozilla Firefox (180) and Acrobar Reader (92).
“Available statistics show that the number of vulnerabilities continues to increase across all categories, whether desktop or mobile platforms, operating systems or applications,” said Ondřej Šabata, Sales Engineer for GFI Software solutions at ZEBRA SYSTEMS. “The growing overall number and severity of vulnerabilities means maintaining an up-to-date overview of the software and devices used in corporate networks, regular scanning and automated patch management. And this applies not only to large organizations, but now also to small and medium-sized businesses (SMBs).”
GFI Software offers the GFI LanGuard solution, which provides automated update management for Windows, MacOS and Linux, vulnerability scanning on computers and mobile devices, and network and software auditing. Since last year, GFI Software has offered the GFI LanGuard MSP version, which enables MSP companies to provide customers with corporate network scanning services under a “Pay-Per-Scan” model, particularly benefiting organizations in the SMB segment.
Article author: ZEBR.ai editorial team
