TLDR InfoSec · MISCELLANEOUS
THE MYSTERY OF THE CVES THAT ARE NOT VULNERABILITIES
Summary from the TLDR InfoSec newsletter
An unknown party submitted a large number of backdated CVEs with high CVSS scores. The problem with this is that a researcher has found that many of these are just automatic submissions that are not actually vulnerabilities. This could cause issues when these CVEs are pulled in by systems that don’t check whether they are disputed.