true...just playing on words. simply adding up CVE stats silly. actually any of these &quot;top 10&quot; vulnerability lists are idiotic.  theres a hell of a lot of layers involved in any system from dozens (perhaps hundreds) of sources that lead to errors (undefined behavior). from the hardware, all the way up through the software stack.