3 ms·
The article was not from Microsoft but from some rag like ZDNet (I think it was also ZDNet, in which case they're currently submarine-ing Rust). 70% of CVEs ar
by xkLA 7y ago
The article was not from Microsoft but from some rag like ZDNet (I think it was also ZDNet, in which case they're currently submarine-ing Rust).
70% of CVEs are C/C++, because those bugs need to be fixed and important things run on C/C++.
It is an entirely useless metric.
- steveklabnik 7y agoZDNet reported on a presentation given at a security conference by Microsoft. > 70% of CVEs are C/C++, because those bugs need to be fixed and important things run on C/C++. You mis-understood the statistic; the statistic was not "70% of CVEs come from C and C++", the statistic was "70% of bugs come from memory safety issues." They did not classify by language.