CVE foundations