Reference
This page is generated from a dbt schema.yml file, the single source of truth for both tables' structure. Column types are kept portable (string, integer, float, timestamp) so the file works unchanged against any database platform. Download it here: schema.yml.
The main table: one row per CVE. Every column, its type, and what it means. Published as
one file per CVE year (cve_summary_<year>.csv.gz and
cve_summary_<year>.parquet).
| Column | Type | Description |
|---|---|---|
cve_id |
string | CVE identifier, e.g. CVE-2024-12345. |
published |
timestamp | When the CVE was first published to the NVD (UTC). |
last_modified |
timestamp | When the CVE record was last updated in the NVD (UTC). |
vuln_status |
string | NVD analysis status, e.g. Analyzed, Awaiting Analysis. |
is_app |
integer | 1 if the CVE affects an application, per its CPE configurations, else 0. |
is_os |
integer | 1 if the CVE affects an operating system, per its CPE configurations, else 0. |
is_hardware |
integer | 1 if the CVE affects hardware, per its CPE configurations, else 0. |
product |
string | Most commonly referenced affected product in the CVE's CPE matches. |
cwe |
string | Primary weakness classification (CWE) assigned to the CVE. |
cvss_version |
string | Version of the CVSS metric used (4.0, 3.1, 3.0 or 2.0), highest available preferred. |
base_score |
float | CVSS base score for the primary metric (0.0-10.0). |
base_severity |
string | CVSS base severity rating, e.g. LOW, MEDIUM, HIGH, CRITICAL. |
is_remote |
integer | 1 if the attack vector is Network (AV:N), else 0. |
is_adjacent |
integer | 1 if the attack vector is Adjacent (AV:A), else 0. |
is_local |
integer | 1 if the attack vector is Local (AV:L), else 0. |
is_physical |
integer | 1 if the attack vector is Physical (AV:P), else 0. |
requires_auth |
integer | 1 if exploitation requires the attacker to be authenticated/have privileges, else 0. |
requires_user_interaction |
integer | 1 if exploitation requires interaction from a user other than the attacker, else 0. |
ssvc_exploitation |
string | SSVC exploitation state, e.g. none, poc, active. |
ssvc_automatable |
string | SSVC automatable rating (yes/no) - whether exploitation can be scripted at scale. |
has_patch_reference |
integer | 1 if a reference tagged 'Patch' is available, or the CNA's affected-versions data states a fixed (unaffected) version, else 0. |
cvss_vector |
string | Full CVSS vector string the metrics above were derived from. |
epss |
float | EPSS score (0.0-1.0): probability of exploitation in the next 30 days. N/A if no EPSS score exists for this CVE. |
epss_percentile |
float | Percentile rank of this CVE's EPSS score among all scored CVEs. N/A if no EPSS score exists for this CVE. |
is_kev |
integer | 1 if listed in CISA's Known Exploited Vulnerabilities (KEV) catalog, else 0. |
kev_date_added |
timestamp | When this CVE was added to the CISA KEV catalog (UTC). N/A if not KEV-listed. |
A child table keyed by cve_id, with one row for every CPE match entry in a
CVE's configurations. A CVE that affects multiple CPEs has multiple rows here, and a CVE
with no CPE matches has none. It exists because cve_summary's product
column collapses to a single most-common value and drops the version-range data
(versionStartIncluding and friends) you need for actual version matching.
It is published only as one file per CVE year (cve_cpe_<year>.csv.gz and
cve_cpe_<year>.parquet). There is no combined "all years" file: this dataset
grows without bound and a single file would eventually break the deploy. See
Downloads for every year file and an example that fetches them all.
| Column | Type | Description |
|---|---|---|
cve_id |
string | CVE identifier, joins to cve_summary.cve_id. |
criteria |
string | Full cpe:2.3 URI as it appears in the NVD record. |
vendor |
string | Parsed from criteria (4th colon-delimited field). |
product |
string | Parsed from criteria (5th colon-delimited field). |
version |
string | Exact version from criteria, or "*" if this match is range-based. |
version_start_including |
string | From NVD versionStartIncluding, null if absent. |
version_start_excluding |
string | From NVD versionStartExcluding, null if absent. |
version_end_including |
string | From NVD versionEndIncluding, null if absent. |
version_end_excluding |
string | From NVD versionEndExcluding, null if absent. |
vulnerable |
integer | NVD's own "vulnerable" flag on the cpeMatch entry (0 or 1). |
The last 10 rows of cve_summary, sorted by CVE ID.
| cve_id | published | last_modified | vuln_status | is_app | is_os | is_hardware | product | cwe | cvss_version | base_score | base_severity | is_remote | is_adjacent | is_local | is_physical | requires_auth | requires_user_interaction | ssvc_exploitation | ssvc_automatable | has_patch_reference | cvss_vector | epss | epss_percentile | is_kev | kev_date_added |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| CVE-2026-93198 | 2026-09-17 17:18:16 | 2026-09-17 17:18:16 | Received | 0 | 0 | 0 | linux | N/A | N/A | N/A | N/A | N/A | N/A | 1 | N/A | N/A | N/A | 0 | N/A | ||||||
| CVE-2026-93199 | 2026-09-17 17:18:16 | 2026-09-17 17:18:16 | Received | 0 | 0 | 0 | linux | N/A | N/A | N/A | N/A | N/A | N/A | 1 | N/A | N/A | N/A | 0 | N/A | ||||||
| CVE-2026-93200 | 2026-09-17 17:18:16 | 2026-09-17 17:18:16 | Received | 0 | 0 | 0 | linux | N/A | N/A | N/A | N/A | N/A | N/A | 1 | N/A | N/A | N/A | 0 | N/A | ||||||
| CVE-2026-93201 | 2026-09-17 17:18:16 | 2026-09-17 17:18:16 | Received | 0 | 0 | 0 | linux | N/A | N/A | N/A | N/A | N/A | N/A | 1 | N/A | N/A | N/A | 0 | N/A | ||||||
| CVE-2026-93202 | 2026-09-17 17:18:16 | 2026-09-17 17:18:16 | Received | 0 | 0 | 0 | linux | N/A | N/A | N/A | N/A | N/A | N/A | 1 | N/A | N/A | N/A | 0 | N/A | ||||||
| CVE-2026-93203 | 2026-09-17 17:18:16 | 2026-09-17 17:18:16 | Received | 0 | 0 | 0 | linux | N/A | N/A | N/A | N/A | N/A | N/A | 1 | N/A | N/A | N/A | 0 | N/A | ||||||
| CVE-2026-93204 | 2026-09-17 17:18:16 | 2026-09-17 17:18:16 | Received | 0 | 0 | 0 | linux | N/A | N/A | N/A | N/A | N/A | N/A | 1 | N/A | N/A | N/A | 0 | N/A | ||||||
| CVE-2026-93292 | 2026-09-17 17:18:16 | 2026-09-17 17:18:16 | Received | 0 | 0 | 0 | signoz | CWE-89 | 4.0 | 8.4 | HIGH | 1 | 0 | 0 | 0 | 1 | 0 | N/A | N/A | 1 | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X | N/A | N/A | 0 | N/A |
| CVE-2026-93295 | 2026-09-17 17:18:17 | 2026-09-17 19:17:07 | Deferred | 0 | 0 | 0 | misp | CWE-20 | 4.0 | 5.1 | MEDIUM | 1 | 0 | 0 | 0 | 1 | 1 | none | no | 0 | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X | N/A | N/A | 0 | N/A |
| CVE-2026-93296 | 2026-09-17 17:18:17 | 2026-09-17 19:17:07 | Deferred | 0 | 0 | 0 | misp | CWE-79 | 4.0 | 5.1 | MEDIUM | 1 | 0 | 0 | 0 | 1 | 1 | none | no | 0 | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X | N/A | N/A | 0 | N/A |
The last 10 rows of cve_cpe, sorted by CVE ID.
| cve_id | criteria | vendor | product | version | version_start_including | version_start_excluding | version_end_including | version_end_excluding | vulnerable |
|---|---|---|---|---|---|---|---|---|---|
| CVE-2026-91744 | cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* | apple | macos | - | 0 | ||||
| CVE-2026-91745 | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | chrome | * | 153.0.8010.47 | 1 | ||||
| CVE-2026-91746 | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | chrome | * | 153.0.8010.47 | 1 | ||||
| CVE-2026-91747 | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | chrome | * | 153.0.8010.47 | 1 | ||||
| CVE-2026-91748 | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | chrome | * | 153.0.8010.47 | 1 | ||||
| CVE-2026-91748 | cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* | apple | macos | - | 0 | ||||
| CVE-2026-91779 | cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:* | gnu | binutils | 2.47 | 1 | ||||
| CVE-2026-91780 | cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:* | gnu | binutils | 2.47 | 1 | ||||
| CVE-2026-91781 | cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:* | gnu | binutils | 2.47 | 1 | ||||
| CVE-2026-91782 | cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:* | gnu | binutils | 2.47 | 1 |