Sources
What a citation in our security coverage means.
Security records
We link to public advisories, vendor notices, vulnerability records, technical write-ups and published reporting. A CVE identifier names a record; it does not by itself establish active exploitation.
Attribution
Claims about affected versions, patches and attacks are attributed to their publisher. We do not imply that we reproduced an exploit or observed a campaign unless the article states evidence of that work.
Corrections
Send a conflicting advisory or broken citation through our corrections page.