Greg Kroah-Hartman, responsible for maintaining the stable and staging branches of the Linux kernel, reported that in the first six months of 2026, 2308 vulnerabilities were identified in the Linux kernel, each assigned a separate CVE identifier. As a result, the Linux kernel rose from second to first place in the number of assigned CVE identifiers among software manufacturers. This figure is not objective, as most manufacturers assign CVE identifiers only to dangerous vulnerabilities, while the Linux kernel accounts for all potential vulnerabilities, regardless of their severity.
Number of assigned CVEs grouped by manufacturers:
- 2308 "Linux"
- 1752 "Google"
- 1308 "n/a"
- 843 "Microsoft"
- 495 "OpenClaw"
- 445 "Oracle Corporation"
- 395 "Adobe"
- 340 "Red Hat"
- 310 "Apache Software Foundation"
- 284 "Apple"
Number of assigned CVEs grouped by individual products:
- 2309 "Linux"
- 1584 "Chrome"
- 888 "n/a"
- 497 "OpenClaw"
- 284 "Windows 10 Version 1607"
- 255 "Firefox" (in Firefox, a single CVE may aggregate information about hundreds of vulnerabilities, for example, CVE-2026-6785 aggregates 155 vulnerabilities, while CVE-2026-6786 aggregates 110).
- 153 "Android"
- 141 "AVideo"
- 136 "Red Hat Enterprise Linux 10"
- 124 "iOS and iPadOS"
Izvor: opennet.ru
