# Assessing Browser Security: A Detailed Study Based on CVE Metrics
## 4 Results
### Main Findings  
According to the results for the period 2021-2024, Google Chrome is the most popular browser in this comparison, while Samsung Internet is the least popular. Analyzing the CVE Details database showed that over four years, Google Chrome also had the highest number of vulnerabilities (817), followed by Mozilla Firefox with 259 vulnerabilities. Samsung Internet had the lowest number of vulnerabilities during this period, with only 20. This could lead to an early conclusion that Google Chrome is the most vulnerable browser, while Samsung Internet is the safest due to its lower number of vulnerabilities. However, browser popularity should be noted, as it influences the number of vulnerabilities. The \(I_{CVE}\) index score shows the ratio between the number of vulnerabilities and browser popularity. Figure 3 indicates that during the 2021-2024 period, the \(I_{CVE}\) index scores for these browsers are as follows: Firefox--82.41, Chrome--12.64, Edge--8.02, Samsung Internet--6.89, and Safari--3.95. The average CVSS score for the selected period was calculated, and all browsers have a high average CVSS score except Samsung Internet, which has a medium CVSS score. However, the ICVSS index score was calculated to account for browser popularity and determine the ratio between the CVSS score and browser popularity over four years. Figure 5 shows that during the 2021-2024 period, the \(I_{CVSS}\) index scores for these browsers are as follows: Firefox--2.62, Samsung Internet--2.27, Edge--1.1, Safari--0.39, and Chrome--0.12. Each vulnerability has a probability of being exploited, which is represented by the EPSS score. The multiplication of the CVSS score and EPSS score called Risk was calculated, and over four years, Edge had the highest \(R_{t}\) score, while Samsung Internet had the lowest due to its lower number of vulnerabilities. To refine the results and determine the ratio between the \(R_{t}\) score and browser popularity, the \(I_{R}\) index was calculated. Figure 7 indicates that during the 2021-2024 period, the \(I_{R}\) index scores for these browsers are as follows: Edge--176.8, Firefox--56.43, Safari--11.78, Chrome--6.11, and Samsung Internet--2.63. According to the results for the year 2024, Google Chrome is still the most popular browser in this comparison, while Samsung Internet is the least popular. Analyzing the CVE Details database showed that in 2024, Google Chrome also had the highest number of vulnerabilities. Figure 9: Total browser threat index scores for the 2024 and 2021–2024 period. vulnerabilities (126), followed by Mozilla Firefox with 61 vulnerabilities. Samsung Internet had the lowest number of vulnerabilities for 2024, with only 1. Figure 3 shows that for 2024, the \(I_{CVE}\) index scores for these browsers are as follows: Firefox--21.63, Chrome--1.91, Edge--0.58, Safari--0.55, and Samsung Internet--0.4. The average CVSS score for 2024 was calculated, and all browsers have a high average CVSS score except for Samsung Internet and Edge, which have medium CVSS scores. Figure 5 shows that during 2024, the \(I_{CVSS}\) index scores for these browsers are as follows: Firefox--2.38, Samsung Internet--2.16, Edge--1.62, Safari--0.42, and Chrome--0.13. The multiplication of the CVSS score and EPSS score was calculated for 2024, with Safari having the highest \(R_{t}\) score and Samsung Internet the lowest. Figure 7 shows that in 2024, the \(I_{R}\) index scores for these browsers are as follows: Firefox--3.04, Edge--1.05, Safari--0.73, Samsung Internet--0.51, and Chrome--0.12. Figure 8 demonstrates the overall comparison of browser threats. The higher the index, the less secure the browser is. Mozilla Firefox has five out of six possible highest vulnerability index scores for 2024 and the 2021-2024 period. Microsoft Edge has the highest index score for the 2021-2024 period in the \(I_{T}\) index. Google Chrome has the three lowest index scores out of six, while Samsung Internet has two of them, and Apple Safari has one.