A Decade of Reoccurring Software Weaknesses

The Common Weakness Enumeration community publishes an aggregate metric to calculate the ”most dangerous software errors.” However, the equation highly biases frequency over exploitability and impact. We provide a metric to mitigate this bias and discuss the most significant weaknesses.