Exploit Watch

Real-time vulnerability intelligence — CISA KEV · VulnCheck · NVD · EPSS / FIRST.org

Could not load data. The nightly fetch may not have run yet.
—
KEV entries tracked
CISA + VulnCheck catalogues
—
Added this month
Last 30 days · CISA KEV
—
High exploit probability
CISA KEV CVEs with EPSS ≥ 10%
—
With public exploit
CISA KEV CVEs in Exploit-DB
—
OSV packages affected
CISA KEV CVEs tracked by OSV
—
Since last exploitation
catalogued by CISA

Recently Exploited

CVEs added to CISA KEV in the last 30 days

Date Added CVE Vendor / Product Domain CVSS EPSS
Loading...

Source: CISA KEV · EPSS / FIRST.org

Highest-Risk Exploited CVEs

Known exploited CVEs ranked by exploit probability — the ones most likely to be weaponised against you

# CVE Vendor / Product Domain CVSS EPSS
Loading...

Sources: CISA KEV · EPSS / FIRST.org

Vulnerability Origin Map

Countries where exploited software vendors are headquartered — darker means more KEV entries originate there

Fewer CVEs
More CVEs

Source: CISA KEV · vendor headquarters data

Registered Vulnerabilities vs. Known Exploited

CVE publications each year vs. confirmed exploitations catalogued by CISA and VulnCheck

Sources: CVE Project / NVD · CISA KEV · VulnCheck KEV

Vulnerability Pressure Index

Year-over-year change — 100% means this year matches last year exactly

CVE Volume (YoY)
—
CVEs published vs. same period last year
Exploitation Rate (YoY)
—
KEV additions vs. same period last year
KEV + EPSS ≥ 3% Coverage
—
% of CISA KEV CVEs with EPSS score ≥ 3%

Sources: CISA KEV · NVD · EPSS / FIRST.org

Where the Attack Surface Is Growing

Known exploited vulnerabilities by technology domain — all sources combined

Sources: CISA KEV · VulnCheck KEV

Patching Priority — Does Severity Predict Attack?

Coverage of confirmed exploited CVEs by different patch prioritisation strategies

Sources: CISA KEV · EPSS / FIRST.org · NVD