Vulnerability stats for Microsoft and OSS