MITRE Corporation is planning a change in the way it counts vulnerabilities. So far, up to 9999 bugs per year can be registered, but after the switch, to be enacted in January 2014, anywhere up to 999,999 holes could get their own CVE numbers. MITRE is consulting the public through the RSA Conference and is accepting feedback by email to [email protected] or to any of the public email lists it has set up to discuss the issues.”]
Source: http://www.h-online.com/security/news/item/CVE-Project-planning-for-beyond-hole-9999-1798788.html