Abstract:Operating systems play a crucial role in computer systems, serving as the fundamental infrastructure that supports a wide range of applications and services. However, they are also prime targets for malicious actors seeking to exploit vulnerabilities and compromise system security. This is a crucial area that requires active research; however, OS vulnerabilities have not been actively studied in recent years. Therefore, we conduct a comprehensive analysis of OS vulnerabilities, aiming to enhance the understanding of their trends, severity, and common weaknesses. Our research methodology encompasses data preparation, sampling of vulnerable OS categories and versions, and an in-depth analysis of trends, severity levels, and types of OS vulnerabilities. We scrape the high-level data from reliable and recognized sources to generate two refined OS vulnerability datasets: one for OS categories and another for OS versions. Our study reveals the susceptibility of popular operating systems such as Windows, Windows Server, Debian Linux, and Mac OS. Specifically, Windows 10, Windows 11, Android (v11.0, v12.0, v13.0), Windows Server 2012, Debian Linux (v10.0, v11.0), Fedora 37, and HarmonyOS 2, are identified as the most vulnerable OS versions in recent years (2021–2022). Notably, these vulnerabilities exhibit a high severity, with maximum CVSS scores falling into the 7–8 and 9–10 range. Common vulnerability types, including CWE-119, CWE-20, CWE-200, and CWE-787, are prevalent in these OSs and require specific attention from OS vendors. The findings on trends, severity, and types of OS vulnerabilities from this research will serve as a valuable resource for vendors, security professionals, and end-users, empowering them to enhance OS security measures, prioritize vulnerability management efforts, and make informed decisions to mitigate risks associated with these vulnerabilities.

Vulnerability Testing of Desktop OS Based on Linux

Stability Test Based on Linux Desktop OS

Vulnerability Detection For Smart Grid Devices Via Static Analysis

Implementation and Automatic Testing for Security Enhancement of Linux Based on Least Privilege

Integrated quantitative assessment of mainstream operating systems' security vulnerabilities

Linux security

A cross-platform multifunctional testbed for vulnerability attack

Vulnerability Detection System Based on Taint Range Propagation Analysis

The Research of Performance Testing of Desktop Operating System

A Novel Vulnerability Assessment System Based on OVAL

Software security vulnerability exploitation method based on a security patch

Vul Tracker Platform for Vulnerability Management and Automatic Tracking

Design and Implementation of Vulnerability Scanning Tools for Intelligent Substation Industrial Control System Based on Openvas

CVECenter: Industry Practice of Automated Vulnerability Management for Linux Distribution Community

Unveiling the Landscape of Operating System Vulnerabilities

RISK-BASED VULNERABILITY ASSESSMENT IN COMPLEX POWER SYSTEMS

A Software Vulnerability Analysis Environment Based on Virtualization Technology

Vulnerability analysis dased on a fuzzy input testing

Design and Implementation of Network Vulnerability Scanning System Based on Web

Vulnerability Analysis Framework for Binaries Based on Model Checking

Design and implementation of a web application vulnerability detection system