Security audit of Windows Registry: “filed 39 bug reports in the Project Zero bug tracker, which have been fixed by Microsoft as 44 CVEs”

Link. Mateusz Jurczyk, Google Project Zero. 30yo C code.