{"statement_id":"st_ff544570e566125e92f1","subject":{"kind":"product","slug":"microsoft-365","name":"Microsoft 365","url":"https://sourcetier.com/products/microsoft-365"},"attribute":{"key":"nvd_cve_records","label":"CVE records in NVD","unit":null,"core":false},"scope":null,"region":null,"first_recorded_at":"2026-09-21T13:13:53.227Z","current":{"claim_id":"4eb4eea5-1e51-4eda-9434-2042f110546a","value":255,"unit":null,"verification_state":"verified","confidence_recorded":90,"observed_on":"2026-09-21","recorded_at":"2026-09-21T13:13:53.227Z","ended_at":null,"ended_by":null,"superseded_by_claim_id":null,"withdrawal_reason":null,"valid_from":null,"extraction":"konnektor:nvd","reader":"connector to an official machine-readable source","parser_version":"1","method":null,"excerpt":null,"sources":[{"url":"https://services.nvd.nist.gov/rest/json/cves/2.0?virtualMatchString=cpe:2.3:a:microsoft:microsoft_365&resultsPerPage=1","tier":1,"type":"security_documentation","retrieved_on":"2026-09-21","role":"evidence"},{"url":"https://services.nvd.nist.gov/rest/json/cves/2.0?virtualMatchString=cpe:2.3:a:microsoft:microsoft_365&resultsPerPage=1","tier":1,"type":"security_documentation","retrieved_on":"2026-10-07","role":"evidence"}]},"version_count":1,"versions":[{"claim_id":"4eb4eea5-1e51-4eda-9434-2042f110546a","value":255,"unit":null,"verification_state":"verified","confidence_recorded":90,"observed_on":"2026-09-21","recorded_at":"2026-09-21T13:13:53.227Z","ended_at":null,"ended_by":null,"superseded_by_claim_id":null,"withdrawal_reason":null,"valid_from":null,"extraction":"konnektor:nvd","reader":"connector to an official machine-readable source","parser_version":"1","method":null,"excerpt":null,"sources":[{"url":"https://services.nvd.nist.gov/rest/json/cves/2.0?virtualMatchString=cpe:2.3:a:microsoft:microsoft_365&resultsPerPage=1","tier":1,"type":"security_documentation","retrieved_on":"2026-09-21","role":"evidence"},{"url":"https://services.nvd.nist.gov/rest/json/cves/2.0?virtualMatchString=cpe:2.3:a:microsoft:microsoft_365&resultsPerPage=1","tier":1,"type":"security_documentation","retrieved_on":"2026-10-07","role":"evidence"}]}],"changes":[{"id":"102087","type":"research_update","label":"Research update","material":false,"sentence":"Microsoft 365: CVE records in NVD documented (verified).","noticed_at":"2026-09-21T13:13:53.227Z","subject":{"kind":"product","slug":"microsoft-365","name":"Microsoft 365"},"before":null,"after":{"value":255,"verification_state":"verified","confidence":90},"claim_id":"4eb4eea5-1e51-4eda-9434-2042f110546a","statement_id":"st_ff544570e566125e92f1","corrected":null}],"page_url":"https://sourcetier.com/statements/st_ff544570e566125e92f1","contract":"A statement is the question a claim answers: one subject, one attribute, one scope and region. statement_id stays the same when a new value supersedes the old one, when we withdraw it and when two duplicate entities are merged (the old id then redirects). claim_id identifies one version. versions lists every version oldest first; ended_by is superseded, withdrawn or null for the current one. confidence_recorded is the confidence stored when that version was written, not a recomputation. unknown describes our research, never the product."}