Common Vulnerabilities and Exposures (CVE) is a public list of disclosed cybersecurity vulnerabilities. Each entry has a unique identifier, a description and at least one public reference. CVE gives vendors, researchers and defenders a common name for the same flaw.

How it works

• A CVE ID has the form CVE-YEAR-NUMBER. The year shows when the ID was reserved or published, not necessarily when the flaw was found.
• IDs are assigned by CVE Numbering Authorities (CNAs), such as software vendors, national CERTs and research organizations, within the CVE Program operated by MITRE.
• A CVE record identifies the flaw; it does not rate it. Severity scores such as CVSS and extra analysis are added by other databases.

Scanners, patch tools, advisories and threat reports all refer to CVE IDs, which lets teams track one issue across many sources.

Why it matters for dark web monitoring

Criminal discussions and exploit sales often reference CVE IDs directly. Matching those mentions with the software an organization runs shows which vulnerabilities are attracting attackers right now. A CVE that is being traded or discussed, or that appears in the KEV catalog, deserves faster patching than its score alone suggests.

Sources: NIST CSRC Glossary: Common Vulnerabilities and Exposures