How Memory Safety CVEs Differ Between Rust and C/C++ (opens in new tab)

How Memory Safety CVEs Differ Between Rust and C/C++ Why do we keep measuring language security by CVE count when we know that number depends as much on installed base size as on any actual property of the language? It took years of debate and a couple of NSA and CISA papers for the ecosystem to take the question seriously — and even then, the answer circulating in most threads is too simple to be useful. Here's my thesis: the difference in memory safety CVEs between Rust and C/C++ is real, d...