Concept
CVSS
Common Vulnerability Scoring System
A 0–10 score for how severe a vulnerability is in theory.
CVSS rates how a flaw can be reached and what it lets an attacker do. It measures potential severity, not whether anyone is exploiting it, so it works best alongside exploitation signals such as CISA's KEV list and EPSS.
CVSS in the news
Recent stories that mention it.
Related
- ConceptCVE · Common Vulnerabilities and ExposuresThe public ID system for vulnerabilities, such as CVE-2026-12345, so everyone means the same bug.
- ConceptEPSS · Exploit Prediction Scoring SystemA daily estimate of how likely a vulnerability is to be exploited in the next 30 days.
- ConceptKEV · Known Exploited Vulnerabilities catalogCISA's list of vulnerabilities with evidence of real-world exploitation.
Plain-language explainers written by SecurityTabs, matched to stories by name. All terms