Why CVSS Isn't a Measure of Risk

When a new critical CVE drops, security teams often rush to patch any system with a 9.0+ CVSS score. However, prioritizing vulnerability remediation strictly by its Common Vulnerability Scoring System