Question: how are cve numbers assigned?
Answer: CVE identifiers are assigned by a CVE Numbering Authority (CNA). There are about 100 CNAs, representing major IT vendors as well as security companies and research organizations. MITRE can also issue CVEs directly. ... The CNA assigns the information a CVE ID, and writes a brief description and includes references.