CISA Known Exploited Vulnerabilities Catalog

1. KEV Catalog

   The searchable catalog of vulnerabilities exploited in the wild.

2. About KEV

   Criteria for adding vulnerabilities to the catalog.

3. BOD 22-01

   Binding directive requiring federal agencies to remediate KEV entries by due date.

4. SSVC

   Stakeholder-Specific Vulnerability Categorization decision model.

5. KEV JSON Feed

   Machine-readable KEV feed.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.

• CAPEC
• CVE Program
• CVSS
• CWE and CWE Top 25
• EPSS
• MITRE ATT&CK Enterprise
• MITRE D3FEND
• National Vulnerability Database