Exploited vulnerabilities
Flaws attackers are using right now, from CISA's Known Exploited Vulnerabilities catalog. If you run one of these products, patch it first.
What's this?
CISA's Known Exploited Vulnerabilities catalog lists flaws with reliable evidence that attackers are using them, out of the tens of thousands published each year. US federal agencies must patch them by a deadline; everyone else should treat the list as a patch-first queue.
Searches the whole catalogue, in your browser.
Loading…
Data: CISA Known Exploited Vulnerabilities catalog (CC0). Exploit likelihood: EPSS by FIRST. Neither CISA nor FIRST endorses Bluebench.
What's this?
EPSS, from FIRST, estimates the chance that exploitation of a vulnerability will be seen in the next 30 days, updated daily. It's a probability, not a full risk score: a low number doesn't make a listed flaw safe to ignore.