Reference

Bug classes, not bugs.

A CVE page is about one thing that happened once. These are about the shape underneath it – the same mistake turning up again in a new product with a new name on it. They get updated whenever that happens, which is why they carry a last-reviewed date instead of a publication date.

Every CVE page links up to whichever one of these it belongs to.