vulnerabilities in the kernel, as well as applications that are
supported by the OS vendor. The data was limited to CVEs that
have one or more references from the following sources. For open
source OS vendors, the following sources were used: DEBIAN,