Evolution of CVEs and Vulnerability Management
summary
Analysis of a 20 year CVE corpus of roughly 100 000 entries identifies seven surprising facts about duplication prevalence and scoring drift and shows median time to remediation for critical flaws stays near 90 days rather than improving The study builds a Python Elasticsearch pipeline to cluster reports and quantify duplicates finding about 30 percent overlap and a rising share of third party component CVEs The paper proposes hybrid CVE architectures and a prototype dashboard that flags high risk items automatically and validates on 2010–2022 data.
AI-written summary · about
related talks
56mCVE Is The Worst Vulnerability Framework (Except For All The Others)
30mThe Myth of the Meteoric Rise in Vulnerabilities
54mTowards Real World Cyber Risk (Panel)
40mOpen Source CVE Monitoring and Management: Cutting Through the Vulnerability Storm
39mCVE 101: The Unfolding Of A Zero Day Attack
15mKeynote
33m40,000 CVEs and Counting: What 60 Years of AppSec Tells Us About 2026
57mSeeing the Vulnerable Forest Through the Exploited Trees