These are some thoughts on the subject of CVE’s that arose by observing new high severity CVE’s being assigned to applications almost nobody uses.