Assessing Browser Security: A Detailed Study Based on CVE Metrics

This study systematically evaluates the vulnerabilities of modern web browsers using developed indices derived from the CVE database, including <i>I<sub>CVE</sub></i>, <i>I<sub>CVSS</sub></i>, <i>I<sub>R</sub></i> and <i>I...

Full description

Saved in:
Bibliographic Details
Main Authors: Oleksii Chalyi, Kęstutis Driaunys, Vytautas Rudžionis
Format: Article
Language:English
Published: MDPI AG 2025-02-01
Series:Future Internet
Subjects:
Online Access:https://www.mdpi.com/1999-5903/17/3/104
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:This study systematically evaluates the vulnerabilities of modern web browsers using developed indices derived from the CVE database, including <i>I<sub>CVE</sub></i>, <i>I<sub>CVSS</sub></i>, <i>I<sub>R</sub></i> and <i>I<sub>T</sub></i>. These indices incorporate metrics such as vulnerability severity and risks, along with browser popularity, to enable a balanced comparison of browser security. The results highlight significant differences in browser security: while Google Chrome and Samsung Internet exhibited lower threat indices, Mozilla Firefox demonstrated consistently higher scores, indicating greater exposure to risks. These observations a slightly contradict widespread opinion. The findings emphasize the importance of timely software updates in mitigating vulnerabilities, as many incidents were linked to outdated browser versions. This study also introduces a robust methodology for assessing browser threats, providing a framework for future research. Potential applications include developing browser-based penetration testing systems to simulate phishing and data extraction scenarios, offering insights into user-specific risks and broader organizational impacts. By combining theoretical analysis with practical implications, this work contributes to advancing browser security and lays the foundation for future applied research in cybersecurity.
ISSN:1999-5903