Concept
KEV
Known Exploited Vulnerabilities catalog
CISA's list of vulnerabilities with evidence of real-world exploitation.
A CVE joins the KEV catalog only when CISA has reliable evidence it is being exploited. US federal agencies must patch listed flaws by a deadline, and many organisations use the list as their first patching priority.
KEV in the news
Recent stories that mention it.
Related
- ConceptCVE · Common Vulnerabilities and ExposuresThe public ID system for vulnerabilities, such as CVE-2026-12345, so everyone means the same bug.
- ConceptCISA · Cybersecurity and Infrastructure Security AgencyThe US government's cybersecurity agency, which issues alerts and runs the KEV catalog.
- ConceptZero-dayA flaw attackers exploit before the vendor has a fix: defenders have had zero days to patch.
Plain-language explainers written by SecurityTabs, matched to stories by name. All terms