CVE Quality for a Cyber Secure Future

CISA is charting a new “Quality Era” for the Common Vulnerabilities and Exposures (CVE) Program, focusing on trust, transparency, and higher data standards. Over the past decade, the CVE Program has grown into a global standard with more than 460 participating organizations, but future success depends on improving data quality, modernizing infrastructure, and expanding partnerships. CISA emphasizes that CVE must remain a free, openly accessible public good, safeguarding its role as a cornerstone of global cyber defense. Efforts ahead include automation, better CNA services, enriched data through initiatives like Vulnrichment, and broader international collaboration.