Windows merge: same base, same malware?

The same code base of Windows for various devices means also that the same malware can hypothetically attack all of them.