researchers who analyze these products; the differences in disclosure practices by
vendors; inadvertent or intentional biases by researchers and the tools they use; the
continuing rapid advances in analysis, such as the discovery of new vulnerability classes
and the growth of fuzzing; and the lack of consistent details in public advisories