Cybersecurity glossary
What is known Exploited Vulnerabilities?
Also known as: KEV, CISA KEV
Definition
CISA’s Known Exploited Vulnerabilities (KEV) catalog lists vulnerabilities with reliable evidence that attackers are exploiting them.
Why it matters
US federal civilian agencies must remediate KEV entries by set deadlines, and CISA urges all organizations to use the catalog to prioritize patching. It is one of the most useful free signals for small teams.
Common questions about known Exploited Vulnerabilities
See also
Sources
Related Guides
GuideGRC
How to Build a Security Policy Framework: Policies, Standards and Procedures That People Follow
A practical guide to writing, approving and maintaining information security policies: the policy hierarchy, the core policy set, ownership, review cycles and how to prove people follow them.
Read more GuideGRC
8 Steps to Prepare for a Security Audit (ISO 27001, SOC 2 or Customer Audit)
How to prepare for an ISO 27001, SOC 2 or customer security audit: scope, control mapping, evidence collection, GRC platforms, mock audits, interviews and managing findings.
Read more GuidePersonal Security
Delivery Text Scams: How to Spot, Stop and Report Fake Package Texts
Fake USPS, UPS, FedEx, DHL and Amazon delivery texts steal card details. Learn the red flags, what to do if you clicked, and how to report them.
Read more GuideWeb Security
A Practical Guide to HTTP Security Headers for Web Developers
Why modern web applications need CSP, HSTS, and X-Content-Type-Options, and how to configure them properly in Next.js and Nginx.
Read more