Every vulnerability a KEV catalogue calls exploited, with the dates that decide a patch window.
395,419
Published CVEs
Every record the CVE Project has issued.
5,688
Catalogued as exploited
Listed by at least one of four KEV catalogues.
1,829
Seen by a sensor
Observed being probed by Shadowserver honeypots or CrowdSec IDS.
ZERODAY KEV listed on or before the day the CVE was publishedKEV listed after publicationACTIVELY SCANNED seen by Shadowserver honeypots or CrowdSec IDS in the last 7 daysRANSOMWARE tied to ransomware by a catalogueEPSS: the chance of new exploitation in 30 days, with its percentile; it does not outrank a KEV listing