Rap Sheets on Top Software Vendors
Summary: Secunia released software fact sheets that go beyond counting vulnerabilities to show the impact of a successful attack, whether a flaw was patched or unpatched on disclosure day, and the window of exploit opportunity between disclosure and patch. Krebs noted the sheets allow comparisons between Chrome, Firefox, Internet Explorer and Opera, but argued exploit kits like Eleonore, Crimepack and SEO Sploit Pack target users running outdated software, especially plugins like Java, Adobe Flash and Reader.
Bottom line: The source's point is that attackers do not care which browser you chose; they exploit outdated plugins like Java, Flash and Reader, so a vulnerability count on the browser itself tells a security leader little about the actual exposure sitting on the endpoint.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026