Microsoft leads vendors with most critical vulnerabilities

Share this article:

Microsoft has more critical vulnerabilities in its products than any other IT security vendor. Adobe and Oracle products come in second and third place, respectively, according to Skybox Security's vulnerability database.

Although Oracle's products contained more overall vulnerabilities, Microsoft's were deemed more critical. More than half of the company's 414 vulnerabilities were critical. The Microsoft Security Response Center defines a critical vulnerability as one that allows code execution without user interaction.

The lab's findings weren't particularly surprising, considering the vendors' market shares. Microsoft, for instance, is the largest company and its products are the most widely used. 

Skybox analyzed more than 20 sources of data to determine the number of vulnerabilities that occurred in 2013. The lab found that about 700 critical vulnerabilities occurred in 2013, and more than 500 of them were from four vendors.

Share this article:

Sign up to our newsletters

More in News

Apple's iOS 7.1.1 fixes Webkit bugs, encryption bypass issue

Released Tuesday, the update prevents exploit via "triple handshake" attacks, which could allow a bypass of encryption safeguards.

'Unauthorized' media contact a fireable offense for U.S. intel employees

The new media policy states that U.S. intelligence employees who have "unauthorized" contact with the media could lose their jobs.

AOL Mail hack furthers spam campaign using spoofed accounts

AOL confirmed on Monday that it was aware of the issue and working to remediate the situation.