CVE
Also called CVE ID, CVE number, Common Vulnerabilities and Exposures
The public reference number given to a known security flaw, such as CVE-2025-32711, so that vendors, scanners and defenders all mean the same flaw.
CVE stands for Common Vulnerabilities and Exposures. It is a shared numbering scheme: when a flaw in a product becomes publicly known, it is given an identifier made of the year and a number, and everyone uses that identifier from then on.
The number is a name and nothing more. It carries no judgement about how serious the flaw is or whether anyone is attacking it. Those come from other sources that attach their facts to the same number: a severity score, and a record of whether the flaw is known to be exploited.
AI has made the list longer. Models are now used to find flaws in code, and the monthly count of new numbers has grown quickly. That makes the number less useful as a to-do list and more useful as an index: the way to look up what is known about a flaw before deciding where it goes in the queue.
For example
A vendor's advisory, your scanner's report and a news story all cite the same CVE number, so you can tell they describe one flaw and not 3.
Put it to use
Where you'll meet CVE in ChatGPT, Gemini and Claude, how to use it there, and the mix-up most people make.
Daily Bytes Plus is in the Android app.