
Via Opus 4.8, not checked carefully. Delightfully, Fable refused to help me. :) 1. CVE-2019-0546 is a Visual Studio example 2. CVE-2023-4039 is a gcc bug where the compiler fails to add hardening (so exploitable if you needed that hardening) I agree they are rare, though! But the claim is not that these specific projects are the highest priority, but that we will be able to do projects of this scale, including many other projects which do result in piles of vulnerabilities.
Post summary
The text briefly lists two CVEs with minimal technical notes, without mentioning any PoC, exploit code, active exploitation, or patch.
