Industry, Policy, and Deployment Data

Microsoft 70%, Google/Android Rust, CISA Secure-by-Design (Jan 2026), NSA CSI, ONCD, DoD SWFT, EU CRA, Chrome CVE data, curl, UAF landscape.

10 items

Research › Memory Management › Industry, Policy, and Deployment Data ›

Microsoft "70% of CVEs Are Memory Safety" Statistic

The canonical industry data point on memory-safety vulnerability prevalence, and every follow-up through 2026.

Research › Memory Management › Industry, Policy, and Deployment Data ›

Google's published 2022-2026 data on memory-safety progress — Android's 76% → <20% trajectory, the CVE-2025-48530 near-miss, the V8 sandbox.

Research › Memory Management › Industry, Policy, and Deployment Data ›

The voluntary US federal pledge that has set the de-facto industry baseline for memory-safety roadmaps.

Research › Memory Management › Industry, Policy, and Deployment Data ›

The NSA's formal language-level guidance, the named-language list, and the joint CISA reissue.

Research › Memory Management › Industry, Policy, and Deployment Data ›

The White House Office of the National Cyber Director's memory-safety report and the C/C++-adverse federal stance.

Research › Memory Management › Industry, Policy, and Deployment Data ›

The DoD's evolving acquisition posture on memory-safe languages, the SWFT framework, and aerospace coding standards.

Research › Memory Management › Industry, Policy, and Deployment Data ›

The CRA's 2026-2027 enforcement timeline and the implicit pressure toward memory-safe languages.

Research › Memory Management › Industry, Policy, and Deployment Data ›

Chrome Security's published per-quarter memory-safety data for 2024-2026, the JSON / PNG / fonts Rust rollouts, and the V8 sandbox.

Research › Memory Management › Industry, Policy, and Deployment Data ›

Stenberg's curl CVE data, the Hyper / Rust experiment, and the unresolved 2026 question of whether memory-safe languages are the whole answer.

Research › Memory Management › Industry, Policy, and Deployment Data ›

The 2024-2026 industry picture on temporal memory safety, kernel mitigations, and the convergence of UAF defences.