Every browser has critical bugs. It's more important how fast they can be patched. And CVE scores are often exaggerated.