If somebody hacks into your Windows computer then you know somebody’s hacked Windows, if somebody hacks a bank or website then you don’t really think about which OS they were running. Go to something like exploit-db and there’s plenty of CVEs for both Windows and Linux but it’s usually in the software.