Exploited CVEs and what to do about them

One page per CVE in the CISA Known Exploited Vulnerabilities catalog: the required remediation action, the federal due date, ransomware association, EPSS likelihood, EU database records and vendor advisories — all from public upstream sources VulnTrek mirrors daily.

Recently confirmed exploited

The newest catalog entries, each linking to its own reference page.

Look up a CVE by identifier

Type an identifier such as CVE-2024-21762 to go straight to its page, or browse the recently added entries below.

Catalog counters

The header reports how many exploited CVEs are tracked, how many are linked to ransomware campaigns and how many were added in the last 30 days.

What each CVE page contains

Required action, due date, ransomware association, EPSS history, EU database records and vendor advisories for that CVE.

Where the data comes from

Public upstream sources — CISA KEV, the EU Vulnerability Database and vendor PSIRT feeds — mirrored daily, with the upstream reference linked on every page.