CVE Insights "News" tab

Applies to: Patch My PC CVE Insights

The News tab of Patch My PC’s (PMPC’s) Common Vulnerabilities and Exposures (CVE) product, CVE Insights, shows a curated news feed of CVEs written by our security professionals.

It consists of the following two tabs:

• All - which lists of all CVEs and is selected by default.

• Personal – which only shows you the CVEs you have created Alerts for.

Note

If you have a subscription that includes PMPC Cloud and have signed in to your PMPC Cloud Company from CVE Insights, then the Company tab will appear, showing only those CVEs affecting your company, based on discovery data from your Intune environment.

For each CVE, in the Newsfeed, we show:

• The name of the CVE

• A brief summary

• The CVSS Max Score (Common Vulnerability Scoring System), where 10 is highest, 0 is lowest.

Note

The Max Score refers to the fact that a given news item could refer to multiple CVEs and represents the maximum or worst CVSS score across the CVEs referenced.

See the Qualitative Severity Ratings section of Vulnerability Metrics for more information.

• Whether PMPC patches are available

• The date the CVE was released.

You can scroll up and down the list of News items, and clicking a specific item expands it to show:

• Additional background information.

• More about the topic section, containing more background information about the CVE.

• Linked CVEs section, which tracks which CVEs, if any, the news item is referencing.

• Products Affected section, containing a list of the products affected by this CVE.

• Any related tags, currently reserved for internal use.

Clicking on an actual CVE expands it to show:

• CVE number

• CVSS Score

• Vendor

• Status based on the National Vulnerability Database (NVD) Statues
• Publication date

• Date it was last updated

• Source of the CVE

• The ability to add an alert for this vendor

• Description section, containing more background information

• Products Affected section, containing a list of products affected by this CVE and the ability to add an alert for this product
• General Information section, containing more detailed CVSS rating information

• Patches section containing details about any available patches

• Vulnerability Intel section, containing:

  • A link to Patch My PC News

  • Other links to background sources of information.

• CVSS Scores section, detailing:

  • CVSS Score

  • Base Severity

  • CVSS Vector

  • Exploitability Score

  • Impact Score

  • Source

  • CVSS Version.