The Real Danger Lurking in the NVD Backlog

On February 12, 2024, the NIST National Vulnerability Database (NVD) began slowing the processing and enrichment of new vulnerabilities.

NIST tracks 250,00 CVE's currently, and adds 25,00 a year. Teams need a reliable source to prioritize the vulnerabilities that matter for defending their organization.

This research aims to illustrate this gravity, utilizing data sourced from the NVD and VulnCheck’s exploit and vulnerability service. The research focused on new CVE’s published by NVD between February 12 and May 20, 2024.