This website seems to be a great resource in finding exploited zero days for each browser, but using it for any kind of security comparison is likely not a good idea. Generally, "number of CVEs" is a flawed comparison metric for almost every kind of question you're going to ask, and CVSS is not particularly good at matching severity in the sense that most people might care about it.