Search for the CVE ID directly in the search box in the menu if its more than 90 days old. Or, in the CVE Database grid to view vulnerability details, then click to see affected products, CVSS/EPSS scores, exploit activity, and remediation guidance. Most entries include links to official vendor advisories, patches, mitigations, workarounds, and threat intelligence to help security teams prioritise and remediate vulnerabilities quickly.

CVSS v4.0 is the latest version of the Common Vulnerability Scoring System and provides a more accurate assessment of vulnerability severity, exploitability, attack complexity, and environmental impact. CVSS v4.0 improves prioritisation by incorporating factors such as attack requirements, exploit maturity, and system exposure, helping organisations better assess operational risk.

Official vendor patches for recently disclosed CVEs are typically available through vendor security advisories, product support portals, and linked remediation resources within the CVE Database. Security teams should prioritise patches for vulnerabilities with active exploitation, KEV status, public proof-of-concept exploits, or internet-facing exposure.

A published CVE means a vulnerability has been publicly disclosed and assigned an identifier. A weaponised vulnerability is one that attackers have operationalised into exploit kits, malware campaigns, ransomware operations, or automated attack tooling. Many published CVEs never see widespread exploitation, but weaponised vulnerabilities significantly increase organisational risk and remediation urgency.