KEV Tracker
Critical and High-severity (CVSS 7.0+) entries from the CISA Known Exploited Vulnerabilities catalogue covered by Vuln Brief — the highest-risk confirmed exploits, sorted by analysis date.
What is the CISA KEV Catalogue?
The CISA Known Exploited Vulnerabilities (KEV) catalogue is the authoritative source of CVEs that have been confirmed exploited in the wild against real-world targets. Maintained by the U.S. Cybersecurity and Infrastructure Security Agency, it's the gold standard for vulnerability prioritisation — if a CVE is in the KEV catalogue, attackers are actively using it.
Federal civilian agencies are required to remediate KEV entries within tight deadlines. Private sector organisations should treat KEV entries with the same urgency. Vuln Brief focuses on Critical and High-severity entries (CVSS 7.0+), providing the technical depth needed to understand what each vulnerability actually does and how to remediate it effectively.
Source: CISA KEV Catalogue →
All Covered KEV Entries
CISA KEV source →No entries match your search.