Ask HN: CVEs Comparison Brave vs. Firefox. Incorrect CVEs for Brave?
I am trying to compare Brave Browser to Firefox, on the security dimension.<p>One of the metrics I am looking at is the number of CVEs.<p>It&#x27;s obviously an imperfect metrics (they all are), but I thought it might be useful.<p>Over the last 2 years:<p>- Chrome has [648 CVE](https:&#x2F;&#x2F;www.cvedetails.com&#x2F;cvss-score-charts.php?fromform=1&amp;vendor_id=&amp;product_id=3264&amp;startdate=2022-03-25&amp;enddate=2024-03-25)<p>- Firefox has [380 CVE](https:&#x2F;&#x2F;www.cvedetails.com&#x2F;cvss-score-charts.php?fromform=1&amp;vendor_id=&amp;product_id=3264&amp;startdate=2022-03-25&amp;enddate=2024-03-25)<p>- Brave has [2 CVE](https:&#x2F;&#x2F;www.cvedetails.com&#x2F;version-list&#x2F;0&#x2F;65025&#x2F;1&#x2F;?q=Brave+Browser)<p>How should I think of the Brave&#x2F;Chrome CVEs?<p>I assume that most Chrome CVEs affect Brave as well (since they share the Chromium codebase), so it seems like the numbers of Brave CVE is incorrect?