Known Exploited Vulnerabilities Catalog - CISA
For the benefit of the cybersecurity community and network defenders—and to help every organization better manage vulnerabilities and keep pace with threat activity—CISA maintains …
2023 Top Routinely Exploited Vulnerabilities - CISA
Nov 12, 2024 · Technical Details Key Findings In 2023, malicious cyber actors exploited more zero-day vulnerabilities to compromise enterprise networks compared to 2022, allowing them …
Top Routinely Exploited Vulnerabilities - CISA
Aug 20, 2021 · This advisory provides details on the top 30 vulnerabilities—primarily Common Vulnerabilities and Exposures (CVEs)—routinely exploited by malicious cyber actors in 2020 …
CISA Adds One Known Exploited Vulnerability to Catalog
Dec 5, 2025 · Meta React Server Components Remote Code Execution Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to …
KEV Catalog Reaches 1000, What Does That Mean and What Have …
Sep 18, 2023 · We know how to reduce the prevalence of vulnerabilities as a design decision – by using memory safe programming languages, by using web template frameworks and …
CISA Adds Six Known Exploited Vulnerabilities to Catalog
May 19, 2025 · CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-4427
Critical Vulnerabilities in Microsoft Windows Operating Systems
Jan 14, 2020 · An attacker could remotely exploit these vulnerabilities to decrypt, modify, or inject data on user connections: CryptoAPI spoofing vulnerability – CVE-2020-0601: This …
CISA Adds Four Known Exploited Vulnerabilities to Catalog
Mar 4, 2025 · CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Overview Over the past decade, the Common Vulnerabilities and Exposures (CVE) Program has established itself as the global standard for vulnerability identification. This period represents …
Microsoft Operating Systems BlueKeep Vulnerability | CISA
Jun 17, 2019 · The Cybersecurity and Infrastructure Security Agency (CISA) is issuing this Activity Alert to provide information on a vulnerability, known as “BlueKeep,” that exists in the following …