Abstract:Operating systems play a crucial role in computer systems, serving as the fundamental infrastructure that supports a wide range of applications and services. However, they are also prime targets for malicious actors seeking to exploit vulnerabilities and compromise system security. This is a crucial area that requires active research; however, OS vulnerabilities have not been actively studied in recent years. Therefore, we conduct a comprehensive analysis of OS vulnerabilities, aiming to enhance the understanding of their trends, severity, and common weaknesses. Our research methodology encompasses data preparation, sampling of vulnerable OS categories and versions, and an in-depth analysis of trends, severity levels, and types of OS vulnerabilities. We scrape the high-level data from reliable and recognized sources to generate two refined OS vulnerability datasets: one for OS categories and another for OS versions. Our study reveals the susceptibility of popular operating systems such as Windows, Windows Server, Debian Linux, and Mac OS. Specifically, Windows 10, Windows 11, Android (v11.0, v12.0, v13.0), Windows Server 2012, Debian Linux (v10.0, v11.0), Fedora 37, and HarmonyOS 2, are identified as the most vulnerable OS versions in recent years (2021–2022). Notably, these vulnerabilities exhibit a high severity, with maximum CVSS scores falling into the 7–8 and 9–10 range. Common vulnerability types, including CWE-119, CWE-20, CWE-200, and CWE-787, are prevalent in these OSs and require specific attention from OS vendors. The findings on trends, severity, and types of OS vulnerabilities from this research will serve as a valuable resource for vendors, security professionals, and end-users, empowering them to enhance OS security measures, prioritize vulnerability management efforts, and make informed decisions to mitigate risks associated with these vulnerabilities.

Cybersecurity Standards in the Context of Operating System

System Security Assurance: A Systematic Literature Review

Cyber–Information Security Compliance and Violation Behaviour in Organisations: A Systematic Review

A Systematic Literature Review on Operating System Security: Distribution and Issues

A Review on C3I Systems' Security: Vulnerabilities, Attacks, and Countermeasures

Unveiling the Landscape of Operating System Vulnerabilities

Detection and analysis of cybersecurity challenges for processing systems

A Systematic Review of Cyber Security and Classification of Attacks in Networks

Cyber-physical systems security: A systematic review

Cybersecurity management in cloud computing: semantic literature review and conceptual framework proposal

Assessing The Effectiveness Of Current Cybersecurity Regulations And Policies In The US

Digitalisation and Cybersecurity: Towards an Operational Framework

Windows And Linux Operating Systems From A Security Perspective

Cybersecurity in industrial control systems: Issues, technologies, and challenges

A comprehensive review study of cyber-attacks and cyber security; Emerging trends and recent developments

Mitigation Techniques for Cyber Attacks: A Systematic Mapping Study

An Overview of Computer Operating Systems and Emerging Trends

A systematic review of cybersecurity assessment methods for HTTPS

How Do Organizations Seek Cyber Assurance? Investigations on the Adoption of the Common Criteria and Beyond

Cybersecurity for Industrial Control Systems: A Survey

Review on cyber-physical and cyber-security system in smart grid: Standards, protocols, constraints, and recommendations