It might not feel like it, but Windows suffered fewer security vulnerabilities than Linux and Unix during 2005.

Linux and Unix experienced more than three times as many reported security vulnerabilities than Windows, according to the mighty US Computer Emergency Readiness Team (CERT) annual year-end security index.

CERT found more than 500 multiple vendor vulnerabilities in Linux and Unix spanning old favorites such as denial of service and buffer overflows, while CERT recorded 88 Windows-specific holes and 44 in Internet Explorer (IE). For a complete list of vulnerabilities, you can visit the CERT site here.

The annual poll does not include the Windows MetaFile (WMF) vulnerability, which has become the most widely reported attack on Windows according to security and antivirus specialist McAfee since being reported on December 28.

News of Windows' relative security will prove little comfort to millions of computer users now bracing for the latest attack of the Sober worm variant due this week.

CERT's data underlines the scale of the challenge faced by Microsoft on security, four years into the company's highly publicized Trusted Computing initiative.

Despite posting fewer vulnerabilities than its Unix and Linux challengers and Microsoft going out its way to talk up its "progress" in security in 2005, it is attacks on Windows that still cause more concern and generate most headlines.

The reason is that, unlike Linux, Windows has greater potential to cause harm because of its presence on desktops in the hands of users who receive self-propagating worms, click on email attachments and download malicious code. And while it seems just as each hole is fixed, a new vulnerability is unlocked elsewhere in the vast Windows code base.®

Related stories

• X marks the bug (3 May 2006)
• Patches released for zero-day IE threat (29 March 2006)
• 'Critical' IE bug threatens PC users (27 March 2006)
• Linux worm targets PHP flaw (20 February 2006)
• Microsoft details Windows anti-virus pricing (8 February 2006)
• Windows support program bent to fit (12 January 2006)
• More cracks appear in Windows (11 January 2006)
• Security flaws on the rise, questions remain (9 January 2006)
• Zero-day holiday (5 January 2006)
• Sober up as Christmas viruses spiral (4 January 2006)
• Windows users waiting for serious fix (3 January 2006)
• World+dog scrambles to fight Windows flaw (3 January 2006)
• Data security moves front and center in 2005 (3 January 2006)
• Trojan alert over unpatched Windows flaw (29 December 2005)
• Sober worm prompts net perv confession (20 December 2005)
• MS releases IE überpatch (14 December 2005)
• Sober worm plans 5 January attack (8 December 2005)
• Worm fears over MS October patch batch (12 October 2005)
• Worm spoofs Google on infected PCs (19 September 2005)
• Microsoft's delay to patch fuels concerns (14 September 2005)