And The Software With Most Vulnerabilities In 2016 Was… Android!

[leadeater]

Was expecting Flash Player to be number one and also extremely surprised Java didn't make the list.

[LAwLz]

31 minutes ago, mynameisjuan said:

Also what version of android is this based on? Is it just number of vulerabilities for the year between 4.4 to 7.1.1? If so I would expect to see a shit ton since so many devices are still on 4.4.

All versions.

It's all vulnerabilities discovered (and disclosed to the public) during 2016.

 

26 minutes ago, zMeul said:

Android is very fragmented

the list should've separated all Android versions not add them all up, like they did with Ubuntu and Debian for example

Maybe it should, maybe it shouldn't.

I don't think they have any strict rules for when to separate an OS (or program) into several separate trackers.

 

Edit: After looking though some of the Android vulnerabilities I do agee that they are inflated, at least for Android. Device specific vulnerabilities such as those only affecting certain Samsung devices, or security holes in Qualcomm and Nvidia drivers are all collected under "Android".

I don't know if Windows gets treated the same way (for example Lenovo messing up their laptops counting as a "windows" vulnerability).

 

 

21 minutes ago, leadeater said:

Was expecting Flash Player to be number one and also extremely surprised Java didn't make the list.

I was also surprised by the lack of Java on the list. But then I looked though the list of Java Runtime vulnerabilities I found 37 ones. Only 2 were not that serious. So on average, a serious Java vulnerability was found each ~10 days. That's a pretty terrible track record.

[Randolph_Bubba]

1 hour ago, Jamiec1130 said:

It's kind of odd to see a server OS with more vulnerabilities than a client OS that is older. You'd think that Microsoft would have worked a bit more on the Windows Server 2012 vulnerabilities, right? Especially due to how long it's been out?

Something to keep in mind it that sever operating systems are much harder to hack into due to outside protection. Such as hardware firewalls.

[TidaLWaveZ]

38 minutes ago, Humbug said:

is it any surprise that the most used operating system in the world...

That's what I was saying, these numbers are kind of useless without active devices/active users.

[Doobeedoo]

Not surprised really. It's very popular and much used OS also fragmented but none the less it's how it goes with new software iteration and being wide spread. All great if there are no major security vulnerabilities or they get fixed fast.

Same how Windows eclipses Mac OS in terms of usage so of course it will get targeted more for exploits. 

[spellmanuk]

2 hours ago, KOMTechAndGaming said:

what are you talking about?

iOS used to be called iPhone OS untill they brought the ipad out in 2009 

[Sniperfox47]

Why is everyone talking like vulnerabilities being found is a bad thing?

 

More vulnerabilities being found is a *good* thing, as long as they get fixed relatively fast...

 

Good for Android. Glad I have Nexus and Pixel devices with monthly security updates.

[MorganO]

25 minutes ago, peej said:

iOS used to be called iPhone OS untill they brought the ipad out in 2009 

and your point is?

[jagdtigger]

3 hours ago, Jamiec1130 said:

Yeah, but it doesn't list the threat level of the vulnerabilities. Windows 10 could have the most harmful threats.

Windows 10 is a threat in it self... (to ms defense force: dont even bother, idk what you gave to say)

[spellmanuk]

18 minutes ago, KOMTechAndGaming said:

and your point is?

my og post was a joke.. you asked for clarification 

[annoyingmoments]

Well, I guess I misinterpret the list and set up Flash Player as the OS of my notebook then.

 

1 hour ago, Randolph_Bubba said:

Something to keep in mind it that sever operating systems are much harder to hack into due to outside protection. Such as hardware firewalls.

But what about private machines then, a server at home people use for a private cloud?

 

3 minutes ago, jagdtigger said:

Windows 10 is a threat in it self... (to ms defense force: dont even bother, idk what you gave to say)

Well, I guess do not use it then? (not a MS fan btw)

 

As for Firefox, does this include vulnerabilities due to the lack of a sandboxed environment? Does my question even make sense in this context if you know what I mean? (missing some English words, sry)

 

 

[jagdtigger]

8 minutes ago, annoyingmoments said:

Well, I guess do not use it then? (not a MS fan btw)

I wont even if they would pay for it . Still running win7, after i finished University(i still have 5 half years)* im switching to linux...

 

* Damned coedu(its a website that contains all the instructions and tests for every course i have) only works correctly with IE...

Edited January 4, 2017 by jagdtigger

[annoyingmoments]

6 minutes ago, jagdtigger said:

I wont even if they would pay for it . Still running win7 after i finished University(i still have 5 half years)* im switching to linux...

 

* Damned coedu(its a website that contains all the instructions and tests for every course i have) only works correctly with IE...

Once I tried to delete an EA Origin account I never used. Tried it for 3 months in Firefox and Chrome with all plugins disabled, even made resets to access the EA Live Chat Support, never worked. Last October I tried Edge, it did not work. Tried IE, GOD BARN YOU, I was raging, it worked.

[ProjectBox153]

1 minute ago, annoyingmoments said:

Once I tried to delete an EA Origin account I never used. Tried it for 3 months in Firefox and Chrome with all plugins disabled, even made resets to access the EA Live Chat Support, never worked. Last October I tried Edge, it did not work. Tried IE, GOD BARN YOU, I was raging, it worked.

I hate it when stuff like that happens! Why does Internet Exploder randomly win at things?!

[annoyingmoments]

1 minute ago, Jamiec1130 said:

I hate it when stuff like that happens! Why does Internet Exploder randomly win at things?!

Maybe because of pre-2005 internet technologies and equal customer support?

[ProjectBox153]

Just now, annoyingmoments said:

Maybe because of pre-2005 internet technologies and equal customer support?

See, and everyone's hating on the modern internet, saying it's too demanding. Why, then, are you still using customer support methods from 2003? And your website's design could use a stylist.

[NumLock21]

Windows Me did not make it on the list! Huzzah!

[ProjectBox153]

2 minutes ago, NumLock21 said:

Windows Me did not make it on the list! Huzzah!

Don't tell me you're still using it, right?

[NumLock21]

1 minute ago, Jamiec1130 said:

Don't tell me you're still using it, right?

My very first OS for my very first build!

[ProjectBox153]

2 minutes ago, NumLock21 said:

My very first OS for my very first build!

It was my first OS as well, although on a pre-built.

[Sniperfox47]

11 minutes ago, NumLock21 said:

Windows Me did not make it on the list! Huzzah!

Umm... That's because it's end of life... Nobody's looking for vulnerabilities in it...

 

I'm surprised XP is on the list. I'd guess it's only there because it's still so widely used.

 

Windows Me has a bunch of known exploits and vulnerabilities that never got fixed and never will because it went end-of-life before they got fixed.

 

Same as Windows XP now has tons of vulnerabilities that will never get fixed. And in another 3 years Windows 7 will have tons of unfixed vulnerabilities for the same reason...

[NumLock21]

18 minutes ago, Sniperfox47 said:

Umm... That's because it's end of life... Nobody's looking for vulnerabilities in it...

 

I'm surprised XP is on the list. I'd guess it's only there because it's still so widely used.

 

Windows Me has a bunch of known exploits and vulnerabilities that never got fixed and never will because it went end-of-life before they got fixed.

 

Same as Windows XP now has tons of vulnerabilities that will never get fixed. And in another 3 years Windows 7 will have tons of unfixed vulnerabilities for the same reason...

The reason why it's the most secure out of all of them combined. And XP isn't even on the list.

[jagdtigger]

41 minutes ago, Jamiec1130 said:

It was my first OS as well, although on a pre-built.

+1, i still have the CPU(some P2 if i remember correctly) from my first PC

[AnonymousGuy]

30 minutes ago, jagdtigger said:

+1, i still have the CPU(some P2 if i remember correctly) from my first PC

I still have a working 300Mhz Pentium 2 box running Windows 98.  The hard drive is suicide-inducing loud.

 

My parents use it for the parallel port.

[jagdtigger]

26 minutes ago, AnonymousGuy said:

I still have a working 300Mhz Pentium 2 box running Windows 98.  The hard drive is suicide-inducing loud.

 

My parents use it for the parallel port.

What kind of ancient equipment can require a parallel port?