Greg Kroah-Hartman, who is responsible for maintaining the stable and staging branches of the Linux Kernel, reported that in the first six months of 2026, the Linux Kernel had identified 2308 vulnerabilities, each assigned a unique CVE identifier. As a result, the Linux Kernel rose from second to first place in the number of assigned CVE identifiers among software vendors. This figure is not entirely objective, as most vendors assign CVE identifiers only to critical vulnerabilities, while the Linux Kernel considers all potential vulnerabilities, regardless of their severity.
Number of assigned CVEs grouped by vendors:
- 2308 "Linux"
- 1752 "Google"
- 1308 "n/a"
- 843 "Microsoft"
- 495 "OpenClaw",
- 445 "Oracle Corporation"
- 395 "Adobe"
- 340 "Red Hat"
- 310 "Apache Software Foundation"
- 284 "Apple"
Number of assigned CVEs grouped by individual products:
- 2309 "Linux"
- 1584 "Chrome"
- 888 "n/a"
- 497 "OpenClaw"
- 284 "Windows 10 Version 1607"
- 255 "Firefox" (In Firefox, one CVE can aggregate information about hundreds of vulnerabilities; for example, CVE-2026-6785 collects 155 vulnerabilities, while CVE-2026-6786 gathers 110).
- 153 "Android"
- 141 "AVideo"
- 136 "Red Hat Enterprise Linux 10"
- 124 "iOS and iPadOS"
Source: opennet.ru
