Actually they have - IOS has had almost 1 a year the last 20 years...compare Code Execution CVEs to the Linux Kernel, and they are damn close if you exclude th

Actually they have - IOS has had almost 1 a year the last 20 years...compare Code Execution CVEs to the Linux Kernel, and they are damn close if you exclude the kernel's huge number for 2017 - Kernel only has 20 more than IOS. And the kernel is likely far larger than IOS Edit: apparently this isn't the only 'product' page for IOS, there are multiple, and also different versions which get their own CVEs: https://www.cvedetails.com/product/19/Cisco-IOS.html?vendor_id=16 https://www.cvedetails.com/product/19/Cisco-IOS.html?vendor_... https://www.cvedetails.com/product/47/Linux-Linux-Kernel.html https://www.cvedetails.com/product/47/Linux-Linux-Kernel.htm...