As for the trademark - many different entities use 'CVE' in different ways. The goal is to migrate the CVE Program under The CVE Foundation, and we'd be happy to have MITRE involved. There is a lot that has to happen outside of the public eye and we can't comment on all the details.
Also note it is *not* the 'MITRE CVE Program', this is misconception we run into a lot. The CVE Program has an independent Board. MITRE is contracted to provide the infrastructure and services that run the program, and they are a CNA, but they do not 'own' the program.
A majority of the CVE Program Board is involved with The CVE Foundation. The CVE Foundation is an independent 501(c)(3) non-profit. The goal is to move the Program under the auspices of the Foundation to remove the single point of failure of US government funding. But a lot has to happen.
We are working as fast as we can to address questions, while we understand there is a lot of confusion we are working to address concerns. FAQ Updated: www.thecvefoundation.org/frequently-a...
