Greg Kroah-Hartman, responsible for maintaining the stable and staging branches of the kernel Linux, reported that in the first 6 months of 2026 in the core Linux 2308 vulnerabilities were identified and assigned separate CVE identifiers. Thus, the kernel Linux rose from second to first place in the number of assigned CVE identifiers among software vendors. This metric is not objective, as most vendors assign CVE identifiers only to dangerous vulnerabilities, while in the kernel Linux All potential vulnerabilities are taken into account, regardless of the degree of danger.
Number of assigned CVEs grouped by vendor:
- 2308 "Linux»
- 1752 Google
- 1308 "n/a"
- 843 "Microsoft"
- 495 "OpenClaw",
- 445 "Oracle Corporation"
- 395 "Adobe"
- 340 "Red Hat"
- 310 Apache Software Foundation
- 284 "Apple"
Number of assigned CVEs grouped by individual products:
- 2309 «Linux»
- 1584 "Chrome"
- 888 "n/a"
- 497 "OpenClaw"
- 284 "Windows 10 Version 1607»
- 255 "Firefox" (in Firefox, information on hundreds of vulnerabilities can be aggregated under one CVE, for example, 155 vulnerabilities are collected under CVE-2026-6785, and 110 under CVE-2026-6786).
- 153 «Android»
- 141 "AVideo"
- 136 Red Hat Enterprise Linux 10 »
- 124 "iOS and iPadOS"
Source: opennet.ru
