KEV Tracker

Every vulnerability CISA has confirmed is being exploited in the wild, from the official Known Exploited Vulnerabilities catalog feed. If it’s on this list and in your estate, it goes to the front of the patch queue.

Loading the KEV catalog…

KEV additions per week, last 12 weeks

Most-exploited vendors

KEV additions by year

Coral = this year to date. *2021 is a partial year: the catalog launched in November 2021 with a large initial batch.

Federal due dates, next 7 days

    Known ransomware use, last 90 days

      Every KEV addition, last 120 days