FTA: "all of the top ten most frequently detected vulnerabilities are to be found in Adobe or Oracle products. Almost 41 per cent of the computers tested were affected by a critical vulnerability in Adobe Reader for which an update has been available from Adobe since last autumn."
Another unsurprising result: Flash is the biggest loser.