KEV
Known Exploited Vulnerability Catalogs
Catalogs of Known Exploited Vulnerabilities (KEV) explorable via this Vulnerability-Lookup instance. All catalogs conform to the GCVE BCP-07 standard.
Trends
The last 26 weeks of listings,
week by week: how many each catalog added, how many preceded the CVE's
publication, how quickly the catalogs reacted, what evidence backed
them and who listed first. Event markers show where to look for a
change of regime. Hover a week to read every series
at once.
Events marked: 2026-09-11 CRA reporting obligation (Art. 14) applies
Hover a week in any panel for its figures.
New listings per week
Entries by listing date, stacked by catalog; a bulk import is clipped and marked.Listed before CVE publication
Listings that precede the CVE's publication, among those with a publication date.Days from publication to first listing
Median for the vulnerabilities first listed that week; bars above a year are clipped and marked.Evidence behind the week's listings
Evidence records by type, as a share of the week's records.First to list
Among the week's first listings later carried by several catalogs, which catalog listed first (ties count for each).The last week is the current one and still filling up. Recent weeks understate late listings by construction: a vulnerability listed next month is not in the data yet.