Every reserved CVE
the List won't show you.

The CVE Program's RBP policy sets hard thresholds — 5% and 50% — on CVE IDs that are reserved, publicly referenced, and never published.

It also redacts the one field that would let anyone outside the Secretariat check them. Query any reserved ID and the owning CNA comes back [REDACTED].

This site is being built to publish the outside view.