Dictionary · Hacking Techniques and Methodologies

A public identifier for a known vulnerability. Each record uses a year and a number so vendors and defenders can talk about the same flaw.

The identifier is a label, not a fix and not a method. You use it to find the vendor's advisory and the patched version.

Example: A scanner cites a CVE identifier. The administrator opens the vendor advisory with that same identifier and applies the listed update.