Vulnerability (computing) - Vulnerability Disclosure Date

Vulnerability Disclosure Date

The time of disclosure of a vulnerability is defined differently in the security community and industry. It is most commonly referred to as "a kind of public disclosure of security information by a certain party". Usually, vulnerability information is discussed on a mailing list or published on a security web site and results in a security advisory afterward.

The time of disclosure is the first date a security vulnerability is described on a channel where the disclosed information on the vulnerability has to fulfill the following requirement:

• The information is freely available to the public
• The vulnerability information is published by a trusted and independent channel/source
• The vulnerability has undergone analysis by experts such that risk rating information is included upon disclosure