Too Long; Didn't Read
In 2018, the #1 spot on the "Top 10 Software with the Most CVEs" list went to Debian Linux, with 1197 CVEs. At the time of writing, the projected 2019 top ten total (currently 3,342) is set surpass the 2018 figure of 4,025 by over 100 CVEs. At the current rate, 2019 looks like dropping from the 2018 total. So far, 12,174 CVEs have been published, which projects to around 15,100 by year's end.