3 ms·

> The Chromium project finds that around 70% of our serious security bugs are memory safety problems. https://www.chromium.org/Home/chromium-security/memory-sa

• masklinn 4y ago
  Similar observation at MS: https://msrc-blog.microsoft.com/2019/07/16/a-proactive-approach-to-more-secure-code/ https://msrc-blog.microsoft.com/2019/07/16/a-proactive-appro... > ~70% of the vulnerabilities Microsoft assigns a CVE each year continue to be memory safety issues That’s actually an understatement, on the graph with this caption 70% is closer to the low ebb / minimum in a given year (2012, 2018). During “bad” years (2009, 2014) it climbs as high as 80.