Entry 41 of 44
CVE
Common Vulnerabilities and Exposures — a shared catalog of openings
English initialism
Coined 1999 at MITRE. Not a classical root: an institutional name. 'Common' means shared knowledge. 'Vulnerabilities and Exposures' means wounds and places of showing. A CVE is supposed to be a public record so defenders can see the same opening.
Established meaning
A dictionary of publicly known cybersecurity weaknesses. The value of the catalog is commonality: one identifier, many parties, a memory that outlives any vendor's blog post. A CVE is a name for an opening that should not belong to the finder.
AI industry deployment
A trophy of discovery. '14 official CVEs assigned' is reported as a performance of control. The catalog is used to prove the scanner works, not to keep a shared memory of where trust was implicit. Severity scores become a league table.
Semantic gap
The catalog as common memory
Common was the point: a wound named so that it could not be privately owned. Industry usage converts the catalog into a press artifact — we found, we named, we closed. The openings remain the content of the record. The prestige of counting them has replaced the obligation to remember what they showed.