Developer ecosystems · Official actively exploited vulnerability catalog

CISA Known Exploited Vulnerabilities Catalog: coverage and access

Track security requirements and exploited-vulnerability signals from an authoritative curated catalog.

What it covers

Geography and granularity

Geography: U.S. government catalog of vulnerabilities known to be exploited in the wild; affected products are global

Granularity: CVE, vendor/product, vulnerability, date added, due date and action notes

Source type: Official actively exploited vulnerability catalog

Track security requirements and exploited-vulnerability signals from an authoritative curated catalog.

Access and cost

Use the catalog page and machine-readable feeds; confirm details against CVE and vendor advisories.

Cost: No charge for public catalog and feeds.

Update cadence: Updated as CISA adds or revises entries

Provider page ↗
Documentation and access details ↗Check the provider's current terms and instructions before use

Interpret carefully

A prioritized subset, not a complete vulnerability database or proof that a specific product is exposed.

Updated as CISA adds or revises entries

This record summarizes source documentation; Jon Bishop did not conduct an independent audit of the underlying dataset.