Of the nearly 250 security vulnerabilities reported for 20 leading software solutions, with the most vulnerabilities discovered in the first month of the year, Google Chrome tops the list, according to a security services firm.
In the latest quarterly report published by Secunia, Google's product is in second place for November 2014 with 61 vulnerabilities, followed by Oracle Solaris, with 73 security holes.
In December 2014, Google Chrome was not included in the top 20 list created by Secunia, but in January it was at the top of the list, with 71 vulnerabilities. The next product had only 19.
Although the number may seem alarming, it does not mean that the product is plagued by security vulnerabilities, as the creator paid more than $1.5 million/€1.3 million to researchers who identified the bugs in its products.
The large number of vulnerabilities identified in the browser can be explained by the fact that third parties who benefit from the company's Security Reward Programs are incentivized to find new ways to bypass the security implemented in Chrome.
Google of all of its products to such an extent that cybercriminals sometimes focus their efforts on exploiting vulnerabilities in other platforms.
The product with the highest number of vulnerabilities for January, according to data collected by Secunia, is X.org, a package that implements a graphical environment (X Window System) for Unix systems.
A total of 152 bugs were reported for X.org, all in December 2014. Other products included in the list for the same month are NVIDIA Graphics Drivers for Linux (63), Oracle Solaris (39), IBM WebSphere Message Broker (25), and Novell eDirectory (25).
Secunia's top 20 for January includes Oracle Java JRE and SDK (each with 19 vulnerabilities), Mozilla Firefox (16), and Oracle VirtualBox (13).
Adobe Flash Player came in sixth place, with only 12 vulnerabilities. However, the number in the next report is sure to be higher, given that the company patched a total of 18 vulnerabilities in the February update.
It is important to note that Secunia's vulnerability reports do not reflect the current security status of a product, as they include vulnerabilities that have already been reported for a particular product.
