Glossary
CISA KEV
The US catalog of vulnerabilities known to be exploited.
The Known Exploited Vulnerabilities (KEV) catalog is published by the US Cybersecurity and Infrastructure Security Agency (CISA). It lists CVEs for which there is evidence of active exploitation.
US federal agencies must fix KEV entries by a due date, but the list is useful to everyone: if a CVE is on it, attackers are using it. Cronzy Watch marks KEV vulnerabilities and ranks them first.