https://msrc.microsoft.com/blog/2024/04/toward-greater-transparency-adopting-the-cwe-standard-for-microsoft-cves/
"Today, we are pleased to announce a significant shift: we will now publish root cause data for Microsoft CVEs using the Common Weakness Enumeration (CWE™) industry standard. " What happens when they have CVEs that aren't covered by a CWE and they want a CWE for it? Does everyone go through the front door so to speak at https://cwesubmission.mitre.org/? -- Kurt Seifried (He/Him) k...@seifried.org
