The Baby Steps of the European Union Vulnerability Database: An Empirical Inquiry

• URL: http://arxiv.org/abs/2602.14313v1
• Date: Sun, 15 Feb 2026 21:18:17 GMT
• Title: The Baby Steps of the European Union Vulnerability Database: An Empirical Inquiry
• Abstract summary: The paper examines the meta-data content of the new EUVD.<n> actively exploited vulnerabilities archived to the EUVD have been rather severe.<n>They have also surpassed vulnerabilities coordinated by European public authorities.
• Score: 0.0
• License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/
• Abstract: A new European Union Vulnerability Database (EUVD) was introduced via a legislative act in 2022. The paper examines empirically the meta-data content of the new EUVD. According to the results, actively exploited vulnerabilities archived to the EUVD have been rather severe, having had also high exploitation prediction scores. In both respects they have also surpassed vulnerabilities coordinated by European public authorities. Regarding the European authorities, the Spanish public authority has been particularly active. With the exceptions of Finland, Poland, and Slovakia, other authorities have not engaged thus far. Also the involvement of the European Union's own cyber security agency has been limited. These points notwithstanding, European coordination and archiving to the EUVD exhibit a strong growth trend. With these results, the paper makes an empirical contribution to the ongoing work for better understanding European cyber security governance and practice.

Related papers

• The Authorization-Execution Gap Is a Major Safety and Security Problem in Open-World Agents [111.54911637435269]
  The Authorization-Execution Gap (AEG) is a major safety and security problem in open-world agents.<n>The AEG is the divergence between what a principal intends to authorize and what an open-world agent ultimately executes.
  arXiv  Detail & Related papers  (2026-05-10T04:05:31Z)
• V2E: Validating Smart Contract Vulnerabilities through Profit-driven Exploit Generation and Execution [52.57923394143007]
  V2E is a new framework for validating whether a reported vulnerability is truly exploitable.<n>V2E automatically generates Proof-of-Concept (PoC) and then assess if the vulnerability could be triggered and incur any financial loss.<n> Evaluation on 264 manually labeled contracts shows that V2E outperforms the baseline approach.
  arXiv  Detail & Related papers  (2026-04-15T08:24:24Z)
• Agents of Chaos [50.53354213047402]
  We report an exploratory red-teaming study of autonomous language-model-powered agents deployed in a live laboratory environment.<n>Twenty AI researchers interacted with the agents under benign and adversarial conditions.<n>Our findings establish the existence of security-, privacy-, and governance-relevant vulnerabilities in realistic deployment settings.
  arXiv  Detail & Related papers  (2026-02-23T16:28:48Z)
• Mirror: A Multi-Agent System for AI-Assisted Ethics Review [104.3684024153469]
  Mirror is an agentic framework for AI-assisted ethical review.<n>It integrates ethical reasoning, structured rule interpretation, and multi-agent deliberation within a unified architecture.
  arXiv  Detail & Related papers  (2026-02-09T03:38:55Z)
• Uncovering AI Governance Themes in EU Policies using BERTopic and Thematic Analysis [0.5321738009179028]
  The European Union (EU) is a key actor in the development of such policies and guidelines.<n>HLEG issued an influential set of guidelines for trustworthy AI, followed in 2024 by the adoption of the EU AI Act.<n>While the EU policies and guidelines are expected to be aligned, they may differ in their scope, areas of emphasis, degrees of normativity, and priorities in relation to AI.
  arXiv  Detail & Related papers  (2025-09-16T12:20:07Z)
• EuroLLM-9B: Technical Report [79.96096140260924]
  EuroLLM-9B is a large language model trained from scratch to cover all 24 official European Union languages and 11 additional languages.<n>We provide a comprehensive overview of EuroLLM-9B's development, including tokenizer design, architectural specifications, data filtering, and training procedures.
  arXiv  Detail & Related papers  (2025-06-04T15:43:31Z)
• Information Retrieval Induced Safety Degradation in AI Agents [52.15553901577888]
  This study investigates how expanding retrieval access affects model reliability, bias propagation, and harmful content generation.<n>Retrieval-enabled agents built on aligned LLMs often behave more unsafely than uncensored models without retrieval.<n>These findings underscore the need for robust mitigation strategies to ensure fairness and reliability in retrieval-enabled and increasingly autonomous AI systems.
  arXiv  Detail & Related papers  (2025-05-20T11:21:40Z)
• From Cyber Security Incident Management to Cyber Security Crisis Management in the European Union [0.0]
  Recently, the European Union (EU) has started to consider also the relation between cyber security incidents and cyber security crises.<n>The paper advances the domain of cyber security incident management research by elaborating how European law perceives cyber security crises and their relation to cyber security incidents.
  arXiv  Detail & Related papers  (2025-04-19T08:03:29Z)
• A Systematic Literature Review on the NIS2 Directive [0.2538209532048867]
  A directive known as NIS2 was enacted in the European Union (EU) in late 2022.<n>The paper presents a systematic literature review on academic research addressing the directive.
  arXiv  Detail & Related papers  (2024-12-11T04:04:47Z)
• The EU-US Data Privacy Framework: Is the Dragon Eating its Own Tail? [0.0]
  The European Commission adequacy decision on the EU US Data Privacy Framework, adopted on July 10th, 2023, marks a crucial moment in transatlantic data protection. This article delves into the main requirements of the framework and offers insights on how healthcare organizations can navigate it effectively.
  arXiv  Detail & Related papers  (2024-07-24T06:00:47Z)
• Federated Learning Priorities Under the European Union Artificial Intelligence Act [68.44894319552114]
  We perform a first-of-its-kind interdisciplinary analysis (legal and ML) of the impact the AI Act may have on Federated Learning. We explore data governance issues and the concern for privacy. Most noteworthy are the opportunities to defend against data bias and enhance private and secure computation.
  arXiv  Detail & Related papers  (2024-02-05T19:52:19Z)
• The risks of risk-based AI regulation: taking liability seriously [46.90451304069951]
  The development and regulation of AI seems to have reached a critical stage. Some experts are calling for a moratorium on the training of AI systems more powerful than GPT-4. This paper analyses the most advanced legal proposal, the European Union's AI Act.
  arXiv  Detail & Related papers  (2023-11-03T12:51:37Z)
• The GDPR Enforcement Fines at Glance [0.7106986689736826]
  General Data Protection Regulation came into force in European Union (EU) in 2018. Many fines have been imposed by national protection authorities in Europe already. This paper examines individual articles referenced in, as well as predicts amount of fines with available metadata mining features extracted from enforcement documents.
  arXiv  Detail & Related papers  (2020-11-02T13:01:45Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.