Measuring CVE Performance Vuln4Cast 2024, Ben Edwards
https://bjedwards.observablehq.cloud/measuring-cna-performance/

Measuring CNA Performance

NVD Faltered

And is slowly recovering

The most reliable, consistent source of data

CWE, CVSS, and CPEs

Mostly timely

Can we look for CNAs for the answer?


This chart shows the cumulative total number of CVEs published by MITRE and analyzed by NVD in 2024. A significant slowdown occurred in mid February, and while recovery began in June, NVD has yet to make significant progress to closing that gap.