CVE
Also written: Common Vulnerabilities and Exposures
Common Vulnerabilities and Exposures: a catalog of known cybersecurity weaknesses.
Common Vulnerabilities and Exposures, or CVE, is a list of publicly known security flaws in software and hardware. Think of it like a catalog number for a specific bug that could be exploited by hackers.
For example, if a popular web browser has a flaw that lets attackers steal passwords, security researchers might assign it a CVE number. This number helps everyone, from software companies to users, track and fix that particular problem.
CVE is a standardized identifier for publicly disclosed cybersecurity vulnerabilities. Each CVE ID is assigned by a CVE Numbering Authority (CNA) and links to a description of the vulnerability, its potential impact, and remediation information. It serves as a common reference point for security advisories, threat intelligence, and vulnerability management tools.
The CVE system aims to provide a shared vocabulary for describing security weaknesses, facilitating communication and coordination across different organizations and security communities.
Recent news highlights how AI models like Anthropic's Claude can be used to discover security vulnerabilities. This raises concerns about AI accelerating the identification and exploitation of Common Vulnerabilities and Exposures, potentially lowering the barrier for cyberattacks.
- Researchers used Anthropic’s Claude to hack into OpenAIAnthropic · TechCrunch AI ·
- Anthropic Claude
- Anthropic's Claude was mentioned in the context of researchers using it to find security vulnerabilities, demonstrating AI's capability in discovering Common Vulnerabilities and Exposures.
- CVSS
- A measure of the severity of a CVE.
- CWE
- A list of common types of software weaknesses, which may lead to CVEs.
- NVD
- A database that provides enhanced information for CVE records.
CVE was created in 1999 by the MITRE Corporation to address the growing need for a unified list of publicly known security vulnerabilities. Source ↗
You can search the CVE database for vulnerabilities related to software you use. Visit the official CVE website and use their search function to look up CVEs associated with a specific product or vendor. This will show you examples of documented security flaws.
The Playbook: reusable how-tos, prompts, configs and tips pulled out of the news.
- PromptRole-play a student struggling with math for AI tutor simulationSimulate a student's math struggles and uncertainty for AI tutor evaluation. · 5 min
- TemplateReusable workflow templates for healthcare teamsTeams can create and share templates for common workflows like documentation or prior authorizations. · 15 min
- TemplateTemplate for building an AI tool tailored to your workA structured approach to defining and building a custom AI tool for specific business needs. · 15 min
- TemplateEvals CSV prompt list for agent skillsA CSV file template for listing prompts used in evaluating agent skills. · 20 min
- HeuristicDouble coding agent task completion with docs linksProviding coding agents with a documentation link significantly increases their task completion rate. · 2 min
Questions people ask
- Who assigns CVE numbers?
- CVE numbers are assigned by CVE Numbering Authorities (CNAs), which include MITRE itself and many other organizations worldwide, such as software vendors and research institutions.
- Is every security flaw a CVE?
- No, only publicly disclosed vulnerabilities that meet specific criteria are assigned a CVE identifier. Many internal or undisclosed flaws do not have CVEs.
First seen on Subvolts Sep 18, 2026. Updated Sep 25, 2026. Written by an AI model from the items above and reviewed against them weekly; report an error.