Known CVEs from OTX and CISA KEV, enriched with NVD data. Application mappings are typically added days after publication.