In my company we have moved to using EPSS (exploit probability scoring system) on top of CVE's. That filters a lot of noise.

https://www.first.org/epss/