[UncleMeat]

Vulns exist in Java applications. Logic bugs can open all sorts of doors to exploitation. But empirically we observe that a huge portion of real vulnerabilities in applications written in C or C++ are memory errors. We've spent decades trying to get people to write C and C++ applications without these errors and utterly failed.

A browser written in a memory safe language won't be free from vulns but it will be free from a huge class of recurring and very serious vulns.