true...just playing on words. simply adding up CVE stats silly. actually any of these "top 10" vulnerability lists are idiotic. theres a hell of a lot of layers involved in any system from dozens (perhaps hundreds) of sources that lead to errors (undefined behavior). from the hardware, all the way up through the software stack.