Shellshock and Heartbleed helped fuel rise in security vulnerabilities in 2014

Rise in vulnerabilities in 2014
Heartbleed

Operating systems and applications saw an overall rise in the average number of vulnerabilities spotted during 2014 with Microsoft Windows continuing to lead the way in terms of the overall number of potential problems.

Data from the National Vulnerability Database (NVD) found 7,038 new security vulnerabilities in 2014, which worked out at an average of 19 per day, dwarfing 2013 and continuing an upward trend that has been building in recent years.

Of the new vulnerabilities, 24 per cent are rated as "high severity", a number lower than 2013; however, the actual number of higher severity vulnerabilities in fact increased when compared to the previous period.

Third-party apps are the most prolific source of vulnerabilities tallying over 80 per cent, operating systems only contributing 13 per cent and hardware devices four per cent.

Microsoft get dubious top honours

Microsoft Windows vulnerabilities were split across seven different versions (Server 2008 and 2012, 7, 8, 8.1, Vista and RT) and totalled 248 with Apple OS X coming out in second with 147, iOS third on 127 and Linux Kernel bringing up the rear on 119.

Microsoft again led the way in the application category with Internet Explorer top of the list with 242 vulnerabilities, dwarfing almost every other application and almost double second placed Google Chrome (124 vulnerabilities).

The year was a particularly busy one for vulnerabilities with Heartbleed, Shellshock and a range of other zero day attacks that wreaked havoc on PCs and Macs alike and as such the rise isn't particularly surprising.

Via: GFI

Latest in Security
Webex by Cisco banner on a Chromebook
Cisco warns some Webex users of worrying security flaw, so patch now
Red padlock open on electric circuits network dark red background
AI-powered cyber threats are becoming the biggest worry for businesses everywhere
Woman using iMessage on iPhone
Apple to take legal action against British Government over backdoor request
Red padlock open on electric circuits network dark red background
Aviaton firms hit by devious new polyglot malware
A laptop with a red screen with a white skull on it with the message: "RANSOMWARE. All your files are encrypted."
Major ransomware attack sees Tata Technologies hit - 1.4TB dataset with over 730,000 files allegedly stolen
Image of laptop infected with malware
Ransomware criminals are now sending their demands...by snail mail?
Latest in News
AMD Ryzen 9950X
Ryzen CPUs are the cheapest Zen 5 cores you can buy, but I was surprised to see this AMD 192-core CPUs on the value leaderboard
A hand holding a phone showing the Android Find My Device network
Android's Find My Device can now let you track your friends – and I can't decide if that's cool or creepy
Insta360 X4 360 degree camera without lens protector
Leaked DJI Osmo 360 image suggests GoPro and Insta360 should be worried – here's why
A YouTube Premium promo on a laptop screen
A cheaper YouTube Premium Lite plan just rolled out in the US – but you’ll miss out on these 4 features
Viaim RecDot AI true wireless earbuds
These AI-powered earbuds can also act as a dictaphone with transcription when left in their case
The socket interface of the Intel Core Ultra processor
Intel unveils its most powerful AI PCs yet - new Intel Core Ultra Series 2 processors pack in vPro for lightweight laptops and high-performance workstations alike