> What happened internally when you discovered that you were given a false severe grade CVE?
Nothing, but we knew it was going to be a shitstorm. Clickbait articles are very annoying.
As for the CVE system, it's utterly broken and idiotic.
Hey now, CVEs are fine; it's CVSS that is totally broken.
Woah, I didn't realize it was false! I remember hearing about that at the time. I had installed VLC at work (generic office, non-tech industry that just uses windows office software) and was worried I might get in trouble, so I uninstalled it.
https://nvd.nist.gov/vuln/detail/CVE-2019-13615