Known Exploited Vulnerability Catalogs
Catalogs of Known Exploited Vulnerabilities (KEV) explorable via this Vulnerability-Lookup instance. All catalogs conform to the GCVE BCP-07 standard.
CISA KEV
1665 entries · 0 subscribersFor the benefit of the cybersecurity community and network defenders—and to help every organization better manage vulnerabilities and keep pace with threat activity—CISA maintains the authoritative source of vulnerabilities that have been exploited in the wild. Organizations should use the KEV catalog as an input to their vulnerability management prioritization framework.
UUID:405284c2-e461-4670-8979-7fd2c9755a60
CIRCL
19 entries · 0 subscribersCIRCL provides a known-exploited vulnerability and supporting the different status_reason described in GCVE BCP-07.
UUID:1a89b78e-f703-45f3-bb86-59eb712668bd
EUVD KEV
35 entries · 0 subscribersENISA via the CSIRTs network provides list of known-exploited seen in the CSIRTs network.
UUID:cce329bf-df49-4c6e-a027-80be2e6483bd
Hover a cell to compare two catalogs.
Hover a line for a catalog's running total.
Across 42 vulnerabilities listed by more than one catalog, half reach all of their catalogs within 125 days of the first listing. The bars show how often each catalog is the earliest to list a vulnerability it shares.
Overlapping catalogs list 7% of shared vulnerabilities on the same day (often because one catalog mirrors another's listing date), so the per-catalog lead below is typically near zero — it is an average, surfacing the genuine separation in the long tail.
Hover a catalog for its lead-time detail.
Hover a column to see which catalogs share that group of vulnerabilities.