Artikel daftar OS yang paling rentan terhadap serangan hacker ini saya ambil dari data CVE Details. Dimana data yang saya gunakan adalah dari tahun 2016, 2017 dan secara keseluruhan selama 17 tahun sejak tahun 1999. Data kerentanan CVE sendiri diambil dari National Vulnerability Database (NVD) yang disediakan oleh National Institue of Standards and Technology.
Berikut ini data dari CVE yang menyajikan OS dan aplikasi yang memiliki tingkat kerentanan di 50 besar.
Data Pada tahun 2016
No | Nama Produk | Nama vendor | Jenis Produk | Jumlah Kerentanan |
---|---|---|---|---|
1 | Android | OS | 523 | |
2 | Debian Linux | Debian | OS | 327 |
3 | Ubuntu Linux | Canonical | OS | 278 |
4 | Flash Player | Adobe | Aplikasi | 266 |
5 | Leap | Novell | OS | 260 |
6 | Opensuse | Novell | OS | 228 |
7 | Acrobat Reader DC | Adobe | Aplikasi | 227 |
8 | Acrobat DC | Adobe | Aplikasi | 227 |
9 | Acrobat | Adobe | Aplikasi | 224 |
10 | Linux Kernel | Linux | OS | 217 |
11 | Mac OS X | Apple | OS | 215 |
12 | Reader | Adobe | Aplikasi | 204 |
13 | Windows 10 | Microsoft | OS | 172 |
14 | Chrome | Aplikasi | 172 | |
15 | Iphone OS | Apple | OS | 161 |
16 | Windows Server 2012 | Microsoft | OS | 156 |
17 | Windows 8.1 | Microsoft | OS | 154 |
18 | Windows Rt 8.1 | Microsoft | OS | 139 |
19 | Edge | Microsoft | Aplikasi | 135 |
20 | Windows 7 | Microsoft | OS | 134 |
21 | Windows server 2008 | Microsoft | OS | 133 |
22 | Firefox | Mozilla | Aplikasi | 133 |
23 | Internet Explorer | Microsoft | Aplikasi | 129 |
24 | Enterprise Linux Workstation | Redhat | OS | 126 |
25 | Enterprise Linux Server | Redhat | OS | 126 |
26 | Enterprise Linux Dekstop | Redhat | OS | 126 |
27 | Windows Vista | Microsoft | OS | 125 |
28 | Fedora | Fedoraproject | OS | 120 |
29 | Linux | Oracle | OS | 118 |
30 | PHP | PHP | Aplikasi | 107 |
31 | Aplle TV | Apple | OS | 102 |
32 | Mysql | Oracle | Aplikasi | 101 |
33 | Wireshark | Wireshark | Aplikasi | 95 |
34 | Qemu | Qemu | Aplikasi | 91 |
35 | Watchos | Apple | OS | 77 |
36 | Phpmyadmin | Phpmyadmin | Aplikasi | 76 |
37 | Solaris | Oracle | OS | 76 |
38 | Firefox Esr | Mozilla | Aplikasi | 72 |
39 | Enterprise Linux | Redhat | OS | 63 |
40 | Linux Enterprise | Suse | OS | 62 |
41 | Flash Player for Linux | Adobe | Aplikasi | 62 |
42 | Air sdk | Adobe | Aplikasi | 62 |
43 | AIR | Adobe | Aplikasi | 56 |
44 | Safari | Apple | Aplikasi | 56 |
45 | Air Sdk & Compiler | Adobe | Aplikasi | 55 |
46 | Enterprise Linux Hpc Node | Redhat | OS | 54 |
47 | Enterprise Linux Server Eus | Redhat | OS | 53 |
48 | Mariadb | Mariadb | Aplikasi | 53 |
49 | Enterprise Linux Hpc Node Eus | Redhat | OS | 49 |
50 | Office | Microsoft | Aplikasi | 48 |
Tahun 2017
No | Nama Produk | Nama Vendor | Jenis Produk | Jumlah Kerentanan |
---|---|---|---|---|
1 | Linux Kernel | Linux | OS | 142 |
2 | Android | OS | 111 | |
3 | Iphone Os | Apple | OS | 107 |
4 | Mac Os X | Apple | OS | 79 |
5 | Chrome | Application | 53 | |
6 | Safari | Apple | Application | 43 |
7 | Watch Os | Apple | OS | 43 |
8 | Tcpdump | Tcpdump | Application | 41 |
9 | Advanced Outbound Telephony | Oracle | Application | 41 |
10 | Debian Linux | Debian | OS | 37 |
11 | Acrobat | Adobe | Application | 33 |
12 | Reader | Adobe | Application | 32 |
13 | Acrobat Reader Dc | Adobe | Application | 32 |
14 | Acrobat Dc | Adobe | Application | 32 |
15 | Icloud | Apple | Application | 31 |
16 | Itunes | Apple | Application | 30 |
17 | NTP | NTP | Application | 29 |
18 | Apple Tv | Apple | OS | 28 |
19 | Flash Player | Adobe | Application | 26 |
20 | Mybb | Mybb | Application | 25 |
21 | Merge System | Mybb | Application | 24 |
22 | Libdwarf | Libdwarf Project | Application | 24 |
23 | Fedora | Fedoraproject | OS | 23 |
24 | Marketing | Oracle | Application | 20 |
25 | Opensuse | Opensuse Project | OS | 20 |
26 | One-to-one Fulfillment | Oracle | Application | 19 |
27 | Mysql | Oracle | Application | 19 |
28 | Ubuntu Linux | Canonical | OS | 18 |
29 | Libtiff | Libtiff | Application | 16 |
30 | Gpu Driver | Nvidia | Application | 16 |
31 | JDK | Oracle | Application | 16 |
32 | Pidgin | Pidgin | Application | 16 |
33 | JRE | Oracle | Application | 16 |
34 | Zimbra Collaboration Suite | Zimbra | Application | 16 |
35 | Gstreamer | Gstreamer Project | Application | 16 |
36 | PHP | PHP | Application | 15 |
37 | WordPress | WordPress | Application | 15 |
38 | Graphicsmagick | Graphicsmagick | Application | 14 |
39 | Security Access Manager 9.0 Firmware | IBM | OS | 14 |
40 | Security Access Manager For Web 8.0 Firmware | IBM | OS | 14 |
41 | XEN | XEN | OS | 13 |
42 | Genixcms | Metalgenix | Application | 13 |
43 | Flexcube Universal Banking | Oracle | Application | 13 |
44 | Leap | Novell | OS | 12 |
45 | Potrace | Potrace Project | Application | 12 |
46 | Xenserver | Citrix | Application | 12 |
47 | Kenexa Lms | IBM | Application | 11 |
48 | Node.js | Nodejs | Application | 11 |
49 | Security Key Lifecycle Manager | IBM | Application | 11 |
50 | Gstreamer | Gstreamer | Application | 10 |
Berdasarkan diagram di atas dapat kita lihat Vendor dengan kerentanan paling banyak adalah Microsoft kemudian di urutan kedua ada Apple. Menurut saya kenapa vendor ini memiliki kerentanan paling besar adalah karena banyaknya produk dari perusahaan tersebut yang digunakan oleh masyarakat dunia.
Semua data di atas belum tentu 100% benar dapat berubah sesuai waktu. Jenis kerentanan di CVE ditentukan menggunakan beberapa pencocokan kata kunci dan nomor cwe. CVE sendiri mengatakan bahwa informasi jenis kerentanan ini harus digunakan sebagai informasi tambahan, mungkin saja tidak dapat diandalkan.