CVE update