Since anyone can report a potential vulnerability, CNAs are constantly verifying and updating CVE records. The list is updated regularly to include new vulnerabilities and their relevant information.