2) Buffer overflows are still #1. This is probably due to underrepresentation of web applications in OS advisories, relative to
other CVEs. In addition, as related issues like integer overflows
increase, they might be detected or reported as buffer
10 of 38