Google: Most Chrome vulnerabilities are memory safety issues

Google engineers believe sandboxing and processes are no longer enough to keep a browser safe. They analyzed 912 high severity and critical security vulnerabilities that were discovered in Chrome since 2015, and concluded that about 70 percent of these bugs concerned memory safety issues.

With stronger sandboxing no longer advantageous and deploying additional processes off the table, Google said it must attack memory unsafety problems by “any and all means necessary.” This includes exploring custom C++ libraries and utilizing safer languages like JavaScript, Rust and Swift when applicable.

Interestingly, software from other vendors suffers from the same issue. Most vulnerabilities in Apple's iOS and macOS operating systems are memory safety issues, and Microsoft also found last summer than around 70 percent of its vulnerabilities are due to memory unsafety. More details at TechSpot.