Not sure, but here's some data from Matt Miller at MSFT: Fellow data nerds: here's a snapshot of the vulnerability root cause trends for Microsoft Remote Code

Not sure, but here's some data from Matt Miller at MSFT: Fellow data nerds: here's a snapshot of the vulnerability root cause trends for Microsoft Remote Code Execution (RCE) CVEs, 2006 through 2017. A few callouts: heap corruption, type confusion, and uninit increased in 2017. Use after free steady y/y but proportionally declined. https://twitter.com/epakskape/status/984481101937651713 https://twitter.com/epakskape/status/984481101937651713