Linux, Microsoft and Google ranked among the vendors with the most vulnerabilities last year
PRAGUE, 13 March 2025 – GFI Software, a provider of security and management solutions for enterprise networks, reported that according to current data from the CVE catalogue of identified vulnerabilities, a record 40,297 vulnerabilities were identified last year, representing 39% more than in 2023. Linux, Microsoft, Google, Adobe and Apple ranked among the vendors with the highest number of vulnerabilities last year, while operating systems remain the most vulnerable software.
While a total of 29,066 vulnerabilities appeared in 2023, last year saw a truly sharp increase. Another unpleasant fact is that the average time between the disclosure and exploitation of vulnerabilities has shortened to just 5 days, giving IT administrators even less time to patch software and at the same time highlighting the urgent need for automated vulnerability scanning and patch management tools or services.
Last year's CVE catalogue statistics show:
- Linux became the software vendor with the highest number of vulnerabilities last year, with 3,461 identified vulnerabilities, followed by Microsoft (1,125), Google (789), Adobe (760) and Apple (595).
- Among operating systems, in addition to the Linux Kernel, the highest number of vulnerabilities was identified in Windows, macOS, Android and Apple iOS.
- Among applications, the most vulnerabilities were discovered in Adobe Experience Manager, Google Chrome and Mozilla Firefox.
“Last year's dramatic increase in the number of vulnerabilities shows that, despite all the efforts of software developers, these flaws and the associated security gaps will remain with us,” said Ondřej Šabata, Sales Engineer for GFI Software solutions at ZEBRA SYSTEMS. “If we want to eliminate the security risks of software vulnerabilities, we must have an up-to-date overview of the software and devices used in corporate networks, carry out regular scanning, and implement automated patch management capable of effectively addressing the ever-shorter intervals between the emergence and exploitation of a vulnerability.”
As part of its portfolio, GFI Software offers the GFI LanGuard solution, which uses AI capabilities to provide automated update management for Windows, MacOS and Linux, vulnerability scanning on computers and mobile devices, and network and software auditing. In the GFI LanGuard MSP version, it enables MSP companies to provide customers with corporate network scanning services under a “Pay-Per-Scan” model, particularly appreciated by organizations in the SMB segment. Since this year, GFI LanGuard has also been part of the cloud platform GFI AppManager.
Article author: ZEBR.ai editorial team
