Privacy Policy
Last updated: September 28, 2026
This policy describes how CVE Vault (cvevault.com) handles information when you use the site. CVE Vault is a free website for searching and reading publicly available Common Vulnerabilities and Exposures (CVE) records.
Information the site processes
CVE Vault does not require an account, and it does not ask you to submit your name, email address, or payment details.
- Search requests. Terms, year, severity, and sort options you submit are sent to our server so the site can return matching CVE records. Those searches are not stored as a personal profile.
- Technical logs. The server and its hosting environment may record details such as IP address, date and time, requested URL, and browser type in operational or error logs. Those logs are kept for site operation and security, then rotated as storage fills.
- CVE content. Vulnerability records come from publicly available open-source CVE data. They describe software issues, vendors, and public references. They are not a collection of visitor personal information.
How that information is used
Search requests are used only to display results. Technical logs are used to keep the site running, diagnose errors, and protect it from abuse. We do not sell personal information.
Third-party services
Pages load resources from services that may receive your IP address and browser details as part of a normal web request:
- Google Fonts, for the site typeface.
- cdnjs (Cloudflare) and unpkg, for the NES.css interface files and, on the hub page, Chart.js.
Those providers process technical data under their own policies. CVE Vault does not use a separate analytics product to track visitors across the site.
Children
CVE Vault is a security-research reference site and is not directed at children under 13. We do not knowingly collect personal information from children.
Your choices
- Use the search tools without creating an account.
- Control cookies for third-party fonts and scripts in your browser.
- Stop using the site at any time. Because we do not keep visitor accounts, there is no profile to delete.
Changes to this policy
We may update this page as the site changes. The date at the top of this page is the date of the latest version. Continued use of CVE Vault after an update means you are using the site under the revised policy.
Contact
CVE Vault is the website published at cvevault.com. The site does not offer user accounts or a contact form. Related terms for using the site are in the Terms of Use.