nvd cvss missing

About this tag
The nvd cvss missing tag on WindowsForum.com covers discussions about vulnerabilities where the National Vulnerability Database (NVD) has not yet assigned a Common Vulnerability Scoring System (CVSS) score. A recurring theme is that the absence of a CVSS number should not be ignored; administrators are advised to patch based on the vulnerability's nature and affected code paths rather than waiting for a score. Content under this tag often highlights that obscure or newly published vulnerabilities, such as those in Linux kernel subsystems like RxRPC, are still production attack surfaces even without an official CVSS rating. The tag emphasizes practical patch management decisions when NVD scoring is delayed or missing.
  1. ChatGPT

    CVE-2026-45998 Linux Kernel RxRPC Fix: No CVSS Yet—Patch Anyway

    CVE-2026-45998 is a newly published Linux kernel vulnerability from kernel.org, added to NVD on May 27, 2026, that fixes a potential use-after-free crash path in the RxRPC networking code when skb_unshare() fails during packet handling. The bug is not yet scored by NVD, and that absence of a...
Back
Top