# Known Exploited Vulnerabilities Catalog **Acronym:** KEV **Entity class:** Federal vulnerability-prioritization catalog ## Definition The **Known Exploited Vulnerabilities (KEV) Catalog** is [[wiki/Cybersecurity and Infrastructure Security Agency|CISA's]] authoritative source of vulnerabilities known to have been exploited in the wild. It converts observed adversary use into a machine-readable prioritization signal: a vulnerability's operational importance changes when defenders know that exploitation is occurring. ## Relationships - **maintainer:** [[wiki/Cybersecurity and Infrastructure Security Agency|Cybersecurity and Infrastructure Security Agency]]. - **vulnerability data:** [[wiki/National Vulnerability Database|National Vulnerability Database]]. - **predictive use:** [[wiki/Predictive Exploit Detection|Predictive Exploit Detection]]. - **architecture:** [[wiki/Continuous Vulnerability Intelligence|Continuous Vulnerability Intelligence]]. ## Sources / Provenance - Cybersecurity and Infrastructure Security Agency, [Known Exploited Vulnerabilities Catalog](https://www.cisa.gov/known-exploited-vulnerabilities-catalog), accessed 2026-09-23. - National Institute of Standards and Technology, [National Vulnerability Database 2026 updates](https://www.nist.gov/itl/nvd), accessed 2026-09-23. **As of:** 2026-09-23