20 years ago software wasn't as much battle tested as today, had way less feature set, was less connected to the internet, and etc. 428 CVEs looks small, assuming not all have CVSS 9.8 or something.

▲

lousken 5 hours ago | parent [-]

It was more tested as real testers were testing it. Nowadays, AI just checks the code.

▲

pixl97 4 hours ago | parent [-]

I guess we should find some of this old source code and test it for exploits to see what is true.

	▲	fragmede 4 hours ago \| parent [-]
		https://github.com/microsoft/ms-dos