Known exploited vulnerabilities
CISA's catalogue of vulnerabilities it has evidence are exploited in real attacks. Newest first.
Loading the catalogue…
| CVE | Vendor / product | Vulnerability | Added to KEV | Due date | Ransomware use | Bulletins | Details |
|---|
Source: CISA Known Exploited Vulnerabilities Catalog, checked twice a day.
Due date is CISA's deadline for U.S. federal civilian agencies under its binding operational directives. It says nothing about whether your own systems are patched; take it as a measure of how urgent CISA considers the flaw. The countdown is shown for entries added in the last 30 days.
Ransomware use "Not known" means CISA has no confirmation of use in ransomware campaigns, not that there is none.