Solution sectors / operating-systems
Operating Systems
Operating systems are the foundation of every device, which makes their vulnerabilities some of the most far-reaching. This hub tracks CVEs across Linux distributions, Windows, macOS, the BSDs and mobile operating systems.
Cumulative CVEs
75,575
across 300 monthly snapshots
Latest month
3,394 · proj
+26.0% MoM · +199.3% YoY
Peak month
2,693
Aug 26
KEV this month
27
20 vendors affected
CVEs per month
Newest period on the right. Click a point to open that monthly report.
Deployment mix
How this sector's software is typically delivered (month in progress) — whether you patch it yourself or a vendor does. AI-assisted vendor classification.
- On-prem98%
- Mixed2%
- Embedded0%
Latest CVEs in this sector
The 15 most recently published vulnerabilities tagged to Operating Systems.
- CVE-2026-14986Out-of-bounds write in it51xxx I2C target FIFO ISR on oversized write transaction6.8
- CVE-2026-18069IBM i is Affected By A Race Condition Vulnerability in SQL Query Engine []6.0
- CVE-2026-19086IBM i is Affected By Multiple Vulnerabilities in PASE [, ]3.3
- CVE-2026-19280IBM i is Affected By Multiple Vulnerabilities in PASE [, ]5.2
- CVE-2026-28960A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. A remote attacker may be able to cause a denial-of-service.7.5
- CVE-2026-86876An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Taho...5.2
- CVE-2026-84518This issue was addressed through improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious website may be able to determine what apps a us...4.3
- CVE-2026-84631This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27. An app may be able to gain root privileges.7.8
- CVE-2026-64701A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A malicious app may be able to gain root privileges.7.8
- CVE-2026-84538A denial-of-service issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote attacker may be able to cause a d...6.5
- CVE-2026-43691A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges.7.8
- CVE-2026-43783A race condition was addressed with improved locking. This issue is fixed in macOS Tahoe 26.6. A malicious app may be able to gain root privileges.7.8
- CVE-2026-84553A resource exhaustion issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote attacker may be able to cause a...7.5
- CVE-2026-84568A path traversal issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker with control of a network director...7.8
- CVE-2026-65414An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Taho...9.8
Weakness fingerprint
Top CWE classes in this sector, latest monthly snapshot (month in progress).
Top vendors
Most CVEs in this sector, latest monthly snapshot (month in progress).
| Vendor | CVEs | Crit | KEV |
|---|---|---|---|
| microsoft | 977 | 44 | 2 |
| linux | 631 | 72 | · |
| redhat | 73 | 4 | · |
| samsung mobile | 29 | 2 | · |
| suse | 12 | 2 | · |
| mediatek inc. | 5 | · | · |
| tubitak bilgem software technologies research institute | 5 | · | · |
| zephyrproject | 4 | · | · |
Subsectors
Breakdown for the latest monthly snapshot (month in progress).
| Subsector | CVEs | Crit | KEV | Vendors | MoM | Top products |
|---|---|---|---|---|---|---|
| windows | 819 | 544 | 27 | 1 | — | windows server 2025 (679) · windows server 2025 (server core installation) (677) · windows server 2022 (641) |
| linux-distro | 710 | 249 | · | 9 | — | linux (631) · red hat enterprise linux 8 (52) · red hat enterprise linux 9 (52) |
| mobile-os | 130 | 7 | · | 5 | — | android (106) · samsung mobile devices (20) · harmonyos (11) |
| — | 30 | 2 | · | 2 | — | i (22) · microsoft exchange server 2016 cumulative update 23 (8) |
| rtos-embedded-os | 7 | · | · | 2 | — | zephyr (4) · silabser.sys driver (3) |
| unix-bsd | 1 | · | · | 1 | — | openbsd (1) |
Sector classification is AI-assisted with human review. How tagging works · Report a misclassification