GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
KEV

Known Exploited Vulnerabilities Catalog

External catalog of known exploited vulnerabilities conforming to GCVE BCP-07 standard.
Catalog UUID: 405284c2-e461-4670-8979-7fd2c9755a60 (CISA)
License: CC0-1.0

Publication activity Vulnerabilities this catalog listed per day, by its earliest observation date (first seen, then recorded, falling back to the status update). Select a day to filter the entries below.

Hover a day to see what this catalog listed on it.

Less More
Vulnerability ID Status Exploited Status Updated Evidence Characteristics Actions
CVE-2020-6819
Mozilla - Thunderbird , Mozilla - Firefox +1 more
Confirmed
Asserted: 2021-11-03
Yes 2021-11-03
First seen: 2021-11-03
1 source
vendor_report
- Details
CVE-2020-12271 Confirmed
Asserted: 2021-11-03
Yes 2021-11-03
First seen: 2021-11-03
1 source
vendor_report
- Details
CVE-2020-17087
Microsoft - Windows 10 Version 1803 , Microsoft - Windows 10 Version 1809 +28 more
Confirmed
Asserted: 2021-11-03
Yes 2021-11-03
First seen: 2021-11-03
1 source
vendor_report
- Details
CVE-2020-0986
Microsoft - Windows , Microsoft - Windows Server +12 more
Confirmed
Asserted: 2021-11-03
Yes 2021-11-03
First seen: 2021-11-03
1 source
vendor_report
- Details
displaying 1701 - 1704 KEV entries in total 1704
About this Catalog

For the benefit of the cybersecurity community and network defenders—and to help every organization better manage vulnerabilities and keep pace with threat activity—CISA maintains the authoritative source of vulnerabilities that have been exploited in the wild. Organizations should use the KEV catalog as an input to their vulnerability management prioritization framework.

This Known Exploited Vulnerabilities (KEV) catalog conforms to the GCVE BCP-07 standard (Best Current Practice) standard for documenting vulnerabilities with confirmed or suspected active exploitation.

Each entry includes exploitation status, evidence sources, and characteristics to help organizations prioritize vulnerability remediation efforts.