Apply updates per vendor instructions.
Evidence dossier
CVE-2020-3992
CVE-2020-3992
gen-56ccdaf9Normalized restatement
OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) has a use-after-free issue. A malicious actor residing in the management network who has access to port 427 on an ESXi machine may be able to trigger a use-after-free in the OpenSLP service resulting in remote code execution.
- State
- PUBLISHED
- Published
- Oct 20, 2020
- Updated
- Oct 21, 2025
- Evidence coverage
- 72%
2026-07-18 · v2026.06.15 · percentile 99.6%
Distinct CVSS assessments remain side by side; none are averaged.
Source comparison
Who said what
OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) has a use-after-free issue. A malicious actor residing in the management network who has access to port 427 on an ESXi machine may be able to trigger a use-after-free in the OpenSLP service resulting in remote code execution.
VMware ESXi OpenSLP Use-After-Free Vulnerability
Probability 0.830150000000; percentile 0.996390000000
Applicability
Cited product scope
[{"status": "affected", "version": "VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG)"}]unknowncpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*; start including 3.0; end excluding 3.10.1.2supportedcpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*; start including 4.0; end excluding 4.1.0.1supportedcpe:2.3:o:vmware:esxi:6.5:-:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:2:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201701001:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201703001:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201703002:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201704001:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201707101:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201707102:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201707103:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201707201:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201707202:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201707203:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201707204:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201707205:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201707206:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201707207:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201707208:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201707209:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201707210:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201707211:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201707212:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201707213:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201707214:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201707215:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201707216:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201707217:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201707218:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201707219:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201707220:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201707221:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201710001:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201712001:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201803001:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201806001:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201808001:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201810001:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201810002:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201811001:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201811002:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201811301:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201901001:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201903001:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201905001:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201908001:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201910001:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-20191004001:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201911001:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201911401:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201911402:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201912001:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201912002:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201912101:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201912102:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201912103:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201912104:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201912301:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201912401:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201912402:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201912403:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-201912404:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-202005001:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-202006001:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-202007001:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.5:650-202010001:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:-:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201806001:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201807001:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201808001:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810001:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810101:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810102:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810103:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810201:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810202:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810203:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810204:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810205:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810206:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810207:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810208:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810209:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810210:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810211:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810212:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810213:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810214:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810215:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810216:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810217:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810218:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810219:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810220:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810221:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810222:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810223:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810224:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810225:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810226:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810227:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810228:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810229:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810230:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810231:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810232:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810233:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201810234:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201811001:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201901001:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201901401:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201901402:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201901403:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201903001:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904001:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904201:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904201-ug:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904202:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904202-ug:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904203:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904203-ug:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904204:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904204-ug:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904205:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904205-ug:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904206:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904206-ug:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904207:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904207-ug:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904208:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904208-ug:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904209:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904209-ug:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904210:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904210-ug:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904211:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904211-ug:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904212:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904212-ug:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904213:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904213-ug:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904214:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904214-ug:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904215:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904215-ug:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904216:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904216-ug:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904217:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904217-ug:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904218:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904218-ug:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904219:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904219-ug:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904220:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904220-ug:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904221:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904221-ug:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904222:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904222-ug:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904223:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904223-ug:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904224:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904224-ug:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904225:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904225-ug:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904226:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904226-ug:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904227:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904227-ug:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904228:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904228-ug:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904229:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201904229-ug:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201905001:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201906002:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201908101:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201908102:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201908103:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201908104:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201908201:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201908202:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201908203:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201908204:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201908205:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201908206:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201908207:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201908208:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201908209:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201908210:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201908211:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201908212:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201908213:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201908214:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201908215:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201908216:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201908217:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201908218:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201908219:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201908220:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201908221:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201912001:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201912101:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201912102:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201912401:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201912402:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201912403:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201912404:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-201912405:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-202004001:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-202004002:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-202004301:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-202004401:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-202004402:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-202004403:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-202004404:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-202004405:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-202004406:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-202004407:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-202004408:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-202006001:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-202008001:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:6.7:670-202010001:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:7.0.0:-:*:*:*:*:*:*supportedcpe:2.3:o:vmware:esxi:7.0.0:1.20.16321839:*:*:*:*:*:*supportedAssessments
CVSS by origin
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HAV:N/AC:L/Au:N/C:C/I:C/A:CCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLimitations and unknowns
- KEV membership is authoritative for the catalog, not proof of exposure in any environment.
- EPSS is a dated model probability and not an individual-environment prediction.
- Affected or fixed status applies only to the exact cited product and version scope; unresolved scope remains unknown.
- NVD-carried upstream facts remain derivative and are not independent corroboration.
- Only NVD metrics validated under the generation-bound calculator are Public Priority eligible; direct CVE record metrics remain display-only.
- NVD CVSS source eligibility is closed: NVD-authored, exact record-source, or registered same-CVE container origin; unmapped sources remain display-only.
- Factor D is unknown in Public Core because no accepted canonical mapping-obligation ledger is present.
- Core replay supports the active and immediately prior generation; retrospective valid-at replay is deferred.