CISA Known Exploited Vulnerabilities (KEV) Catalog

Reported Context (4)

Please don’t take this to mean it is time to start ignoring CVSS scores, CISA's KEV catalog, or established patching SLAs; those remain essential building blocks. But DVE adds real-time context around attacker intent How Bitsight Uses AI to Speed Internet-Wide Vulnerability Exposure Discovery
The CISA KEV Catalog is a list of vulnerabilities that attackers have already exploited. How to Prioritize Vulnerabilities Beyond CVSS Scores
announced that it has narrowed its priorities for the NVD, focusing only on vulnerabilities in CISA’s KEV catalog, software used by the federal government, and critical software identified under Executive Order 14028. Inspector General Finds NIST Mismanaged the National Vulnerability Database
government report vulnerabilities for possible inclusion in the Known Exploited Vulnerabilities catalog. CISA Opens KEV Nominations to External Vulnerability Researchers

People (12)

Vendors (3)

Products (15)

Industries (4)

Countries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.