Full glossary

Glossary · CISA KEV

The CISA KEV catalog: vulnerabilities actually being exploited

The official US list of vulnerabilities that have been seen exploited.

Updated · 3-minute read

Read with an AI .md version

In one sentence

KEV (Known Exploited Vulnerabilities) is the catalog, maintained by CISA, of vulnerabilities whose real-world exploitation is confirmed.

Why it matters

A vulnerability in the catalog is no longer theoretical: attackers are using it. It should go to the top of the list.

How it changes

The catalog is updated continuously. A vulnerability known for months can be added overnight.

And LibWatch?

LibWatch flags vulnerabilities from the KEV catalog, lets you filter on them, and can notify you when a vulnerability in your projects is added to it.

See also

  • Glossary

    EPSS

    The likelihood of exploitation.

  • Glossary

    CERT-FR

    Alerts from ANSSI.

  • Glossary

    SCA

    Composition analysis.

See which of your vulnerabilities are being exploited.

Try it for 14 days