Code-point registry

CISA Known Exploited Vulnerabilities Catalog

CISA KEV

Security & crypto

WHY YOU NEED THIS

If a CVE appears in KEV, patch priority jumps — widely used as a de-facto industry triage list beyond raw CVSS scores.

What It Is

US Cybersecurity and Infrastructure Security Agency catalog of vulnerabilities with confirmed active exploitation — binding remediation deadlines for US federal agencies.

Taxonomy

Flat catalog by CVE ID · Filter by vendor/product · Required action dates

Top-Level Categories

Known Exploited VulnerabilitiesBinding Operational DirectivesAdvisories

Master Catalog

KEV catalog

Sub-Indexes & Guides

CISA advisories

Related Registry Sources

cisakevvulnerabilityexploited