nvd gap

The nvd gap tag focuses on situations where a vulnerability record is missing or incomplete in the National Vulnerability Database. Its available coverage centers on CVE-2026-15904, a reported use-after-free issue associated with Chromium’s Ozone component, where an NVD lookup returns “CVE ID Not Found.” The material explains that a RESERVED CVE status can produce this result, although the status is not verified here. It also addresses the uncertainty that follows when no confirmed Chrome patch or affected-version range is available, recommending continued normal browser updates, CVE tracking, and avoiding a CVE-specific compliance threshold until Google publishes a fixed build.