Post #4257564

@samuel@social.meenzen.net "CVEmaxxing", if you don't mind, I'm going to steal that for my next talk! And the Google/Microsoft codebases are for _different_ products from those vendors, not just a single codebase, so you can't really compare them that way at all. Look at the product if you wish to compare for products. For products, our numbers are way way higher because most commercial vendors do not report all CVEs, only the "high" ones.