Chrome has had 50% more remote exec CVEs than Adobe Flash, and Chrome has had 19x more CVEs total than Flash. https://www.cvedetails.com/product/15031/Google-C

Chrome has had 50% more remote exec CVEs than Adobe Flash, and Chrome has had 19x more CVEs total than Flash. https://www.cvedetails.com/product/15031/Google-Chrome.html?vendor_id=1224 https://www.cvedetails.com/product/15031/Google-Chrome.html?... https://www.cvedetails.com/product/6761/Adobe-Flash-Player.html?vendor_id=53 https://www.cvedetails.com/product/6761/Adobe-Flash-Player.h... Sometimes having more CVEs can be a good thing, since it means you're doing a better job discovering bugs. In the past Google used to invent bug hunting technologies like ASAN to do just that. But these days, it doesn't seem like Google is the one discovering them. Each time I hear about a Chrome bug, it's because the Chrome team is reacting to threats in the wild. It probably isn't safe to run browsers on personal computers anymore. You'd think browsers would have hunkered down by now and devoted more resources to bug hunting, but the velocity of features just keeps increasing. CloudFlare is probably the only company offering a sensible solution, which is to run the browsers as a remote desktop connection. But open source tools should exist for doing that with acceptably similar quality.