Reference

A CVE page is about one thing that happened once. These are about the shape underneath it – the same mistake turning up again two years later in a different product with a different name on it.

I update these whenever that happens, which is why they carry a last-reviewed date instead of a published one. Every CVE page links back up to whichever one of these it belongs to.