KNOWN EXPLOITED VULNERABILITIES · CISA KEV

Vulnerability dashboard

Search the most recent entries in CISA's Known Exploited Vulnerabilities catalog, newest first. Filter by a word, a CVE ID, a vendor, or known ransomware use — and check whether a product you rely on has a flaw attackers are already using.

Read this before the list

Every entry on this page is in CISA's Known Exploited Vulnerabilities (KEV) catalog, which means CISA has confirmed it is being exploited. A flaw earns its place here because attackers are using it in the real world — not because it looks serious on paper.

KEV does not publish severity (CVSS) scores, so none are shown here. Being listed is about confirmed exploitation, not a severity ranking: a listed flaw is not automatically “more severe” than an unlisted one, and this page does not rank entries by severity.

Not being listed does not mean a product is safe. KEV is a catalog of confirmed exploitation, not a complete list of flaws. A product can carry a serious, unpatched vulnerability that simply has not been confirmed as exploited — keep everything updated either way.

This feed carries no fixed-version numbers. CISA's KEV data confirms exploitation and sets a remediation due date; it does not publish the patched version for a product, so none is shown or invented here. Each entry below gives CISA's own required action, links its CVE ID to the catalog record, and — where CISA's notes provide them — links the advisory and reference pages for the entry.

Loading the live catalog…