Is there a reason why an organization would continue to use CVE numbers from las... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

gruez on Jan 8, 2020 | parent | context | favorite | on: Security vulnerabilities fixed in Firefox 72.0.1 a...

Is there a reason why an organization would continue to use CVE numbers from last year?

callmejonas on Jan 8, 2020 [–]

CVE are assigned from the year the vulnerability was found. Not when it was announced.

However, a CNA like Firefox does not allocate CVE as they need them. They first ask Mitre for a block of X CVE to use as they need. They probably got a new block in September.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact