The Common Vulnerabilities and Exposures (CVE) system is a dictionary of publicly known information security vulnerabilities and exposures in publicly released software packages.
I am looking for a canonical answer to the following questions:
How do CVEs work?
How do you find a CVE related to a particular product?
Where can I find a hotfix for a CVE?
Do all listed CVEs have hotfixes?
What do I do if I can't find a hotfix for a listed CVE?
I have run a google search to identify, collect and view CVEs for different products. The results vary however, and I was hoping we would be able to use my question as a basis from which users can become aware of the CVE system, and can following a step-by-step procedure for identifying and collecting product CVEs.