b2KIT

CVE Lookup & Details Viewer

Search for Common Vulnerabilities and Exposures (CVE) by ID. View CVSS scores, descriptions, and affected products.

Tested tool guide Tested browser tools Checked August 16, 2026

What CVE Lookup & Details Viewer does and how it behaves

Start with a complete identifier such as CVE-2021-44228. The viewer uses that identifier to locate the corresponding CVE record and presents the available description, CVSS information, and affected-product data. It answers questions about one already identified vulnerability; it does not discover vulnerabilities from a product name or scan a device. The common mistake is treating an affected-product entry as proof that a particular installation is vulnerable. Version, configuration, platform, and vendor guidance still need to be checked.

How the result is produced

1

Identifier lookup

Enter the identifier assigned by the CVE Program, including the CVE prefix, four-digit year, and sequence number. The identifier is the lookup key for a single record. A syntactically plausible identifier may still have no public details because it is reserved, rejected, not yet available to the viewer, or simply does not exist.

2

Record interpretation

The result groups the record's available description, CVSS score or vector, and affected-product information. A CVSS base score summarizes severity from defined metric values; it is not a probability that exploitation will occur. Product entries identify the scope described by the record, but names and version boundaries may not match the labels used in local software inventories.

Good uses

  • Review the description and severity data for a CVE named in a scanner alert, incident ticket, or security bulletin.
  • Check whether a published record identifies a product or version relevant to an asset under investigation.
  • Retrieve a CVSS score and supporting record details before triaging a known vulnerability with operational context.

Limits and checks

  • Confirm the entire CVE identifier. The year alone, a product name, or a vendor advisory number is not an equivalent lookup key.
  • Do not interpret a high CVSS score as confirmation that exploit code exists, exploitation is active, or the local system is exposed.
  • Treat affected-product and version data as record scope, not an inventory verdict. Editions, builds, configurations, backported fixes, and vendor-specific versioning can change applicability.

Common questions

Can I search with a vendor or product name instead of a CVE ID?

No. This viewer is intended for lookup by a known CVE identifier. If you only know the vendor, product, or vulnerability description, first use a vulnerability catalog or the vendor's security-advisory search to identify candidate CVE IDs. Then look up each identifier here to inspect its individual record.

Does the displayed CVSS score prove that my system needs an emergency patch?

No. CVSS describes the technical severity represented by its metric values, not your asset's exposure or business priority. Confirm that the affected product and version match, then consider configuration, network reachability, compensating controls, exploitation evidence, asset importance, and vendor remediation guidance before choosing a response deadline.

References and verification

The behavioral notes were checked against the browser implementation. Standards and primary references below define the relevant format, formula, or platform behavior.

Related Tools