What is CVE?
1 min read
Updated 2026-02-05
Common Vulnerabilities and Exposures. A standardized identifier for known security vulnerabilities. Each CVE has a unique ID (e.g., CVE-2021-44228 for Log4Shell).
Understanding CVE
CVE is a dictionary of publicly known security vulnerabilities maintained by MITRE. Each entry includes an ID, description, and references. CVEs help security professionals communicate about specific vulnerabilities consistently and track their remediation.
Examples
- CVE-2021-44228 (Log4Shell) - Critical RCE in Apache Log4j
- CVE-2014-0160 (Heartbleed) - OpenSSL memory disclosure
- CVE-2017-5638 (Equifax breach) - Apache Struts RCE
How to Prevent
- Regularly scan dependencies for known CVEs
- Subscribe to security advisories for your tech stack
- Implement a vulnerability management program
- Prioritize patching based on CVSS scores and exploitability
Worried about CVE in your app?
Our security audits identify vulnerabilities like this before attackers do. Get expert manual review of your codebase.