NIST Interagency Report (IR) 7864, The Common Misuse Scoring System (CMSS): Metrics for Software Feature Misuse Vulnerabilities, has been released as final. This report proposes a specification for CMSS, a set of standardized measures for the severity of software feature misuse vulnerabilities. Software feature misuse vulnerabilities are vulnerabilities in which software features also provide an avenue to compromise the security of a system. NISTIR 7864 also provides examples of how CMSS measures and scores would be determined. CMSS data can assist organizations in making security decisions based on standardized, quantitative vulnerability data.