Common Vulnerability Reporting Framework

CVRF is an XML format for machine-readable security advisories and the predecessor of Common Security Advisory Framework (CSAF). Microsoft still publishes its monthly security updates as CVRF documents as well. New advisories from other vendors now appear mostly in the successor format CSAF.