What is the CISA KEV catalog?

The Known Exploited Vulnerabilities (KEV) catalog is a list maintained by the US Cybersecurity and Infrastructure Security Agency, tracking vulnerabilities that are being actively exploited by attackers in the wild.

What does actively exploited mean?

It means real-world attackers are already using this vulnerability to compromise systems, as opposed to a theoretical flaw that has only been demonstrated in a lab or research setting.

Is this catalog specific to France?

No, unlike other Stroople Signal pages, this catalog is global. Vulnerabilities affect software used worldwide regardless of borders.

What does the ransomware-linked badge mean?

It indicates the vulnerability has been associated with known ransomware campaigns, which generally raises its priority for patching.

Where can I find the complete official KEV catalog?

The full, authoritative and up to date catalog is published directly on the CISA website.

Qu'est-ce que le catalogue CISA KEV ?

Le catalogue KEV (Known Exploited Vulnerabilities) est une liste maintenue par l'agence américaine CISA, recensant les vulnérabilités activement exploitées par des attaquants dans des conditions réelles.

Que signifie activement exploitée ?

Cela signifie que des attaquants utilisent déjà cette vulnérabilité pour compromettre des systèmes, à la différence d'une faille théorique seulement démontrée en laboratoire ou en recherche.

Ce catalogue est-il spécifique à la France ?

Non, contrairement aux autres pages de Stroople Signal, ce catalogue est mondial. Les vulnérabilités touchent des logiciels utilisés partout, sans frontière.

Que signifie le badge lié à un ransomware ?

Il indique que la vulnérabilité a été associée à des campagnes de ransomware connues, ce qui augmente généralement la priorité de son correctif.

Où trouver le catalogue KEV officiel complet ?

Le catalogue complet, à jour et faisant foi, est publié directement sur le site officiel de la CISA.

Vulnerabilities — Actively Exploited

← Back to overview

Vulnerabilities — Actively Exploited

The CISA KEV catalog tracks vulnerabilities attackers are exploiting right now, not theoretical flaws sitting in a lab. Every CVE listed here is an active risk for any organisation still running the affected software unpatched.

What do you want to look at?

Source

Loading summary…

Vulnerabilities added per month Full catalog history

Loading chart…

Ransomware correlation

Loading chart…

Most affected vendors

Loading chart…

Ransomware-linked only Sort by EPSS (highest first)

Loading vulnerabilities…

Data is aggregated automatically from public sources.