2 ms·

Note: the title is entirely bogus as this piece mainly quantifies CVEs filed for basic, non-military software.