TLDR InfoSec · MISCELLANEOUS

THE MYSTERY OF THE CVES THAT ARE NOT VULNERABILITIES

malwarebytes.com2 min read

Summary from the TLDR InfoSec newsletter

An unknown party submitted a large number of backdated CVEs with high CVSS scores. The problem with this is that a researcher has found that many of these are just automatic submissions that are not actually vulnerabilities. This could cause issues when these CVEs are pulled in by systems that don’t check whether they are disputed.