  NVD is one of the most popular databases used by researchers to conduct
empirical research on data sets of vulnerabilities. Our recent analysis on
Chrome vulnerability data reported by NVD has revealed an abnormally phenomenon
in the data where almost vulnerabilities were originated from the first
versions. This inspires our experiment to validate the reliability of the NVD
vulnerable version data. In this experiment, we verify for each version of
Chrome that NVD claims vulnerable is actually vulnerable. The experiment
revealed several errors in the vulnerability data of Chrome. Furthermore, we
have also analyzed how these errors might impact the conclusions of an
empirical study on foundational vulnerability. Our results show that different
conclusions could be obtained due to the data errors.
