Known Exploited Vulnerability Feed
Evidence-backed KEV intelligence enriched with confidence scoring, exploitation status, CISA KEV status, and sensor telemetry.
2,683
Total KEVs
Known exploited vulnerabilities tracked in KEVIntel
1,032
Beyond CISA KEV
Additional exploited CVEs tracked beyond CISA KEV
58
KEVs Observed in Sensors (7d)
Tracked KEVs with live exploitation attempts in honeypots
1,832+
Artifacts Available
PoC, Nuclei, and scanner context
| CVE | Product | Vendor | Confidence | Exploitation Status | Sensors | Added | Artifacts |
|---|---|---|---|---|---|---|---|
| CVE-2021-42237 | Sitecore XP | Sitecore | Confirmed | Active | — | about 1 year ago |
PoC
Nuclei
|
| CVE-2022-21999 | Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | Microsoft | Confirmed | Active | — | about 1 year ago |
PoC
|
| CVE-2022-26143 | MiCollab, MiVoice Business Express | Mitel | Confirmed | Active | — | about 1 year ago |
PoC
Nuclei
|
| CVE-2022-26318 | Firebox and XTM appliances | WatchGuard | Confirmed | Active | — | about 1 year ago |
PoC
|
| CVE-2012-5076 | Java SE | Oracle | Confirmed | Active | — | about 1 year ago |
PoC
|
| CVE-2013-1690 | Firefox, Firefox ESR, Thunderbird, Thunderbird ESR | Mozilla | Confirmed | Active | — | about 1 year ago |
PoC
|
| CVE-2013-2465 | Java SE | Oracle | Confirmed | Active | — | about 1 year ago |
PoC
|
| CVE-2013-2551 | Internet Explorer | Microsoft | Confirmed | Active | — | about 1 year ago |
PoC
|
| CVE-2013-2729 | Reader and Acrobat | Adobe | Confirmed | Active | — | about 1 year ago |
PoC
|
| CVE-2013-3660 | Windows | Microsoft | Confirmed | Active | — | about 1 year ago |
PoC
|
| CVE-2015-2426 | Windows | Microsoft | Confirmed | Active | — | about 1 year ago |
—
|
| CVE-2016-0040 | Windows | Microsoft | Confirmed | Active | — | about 1 year ago |
PoC
|
| CVE-2016-0189 | Internet Explorer | Microsoft | Confirmed | Active | — | about 1 year ago |
PoC
|
| CVE-2017-0037 | Internet Browser | Microsoft Corporation | Confirmed | Active | — | about 1 year ago |
PoC
|
| CVE-2017-0213 | Windows COM | Microsoft Corporation | Confirmed | Active | — | about 1 year ago |
PoC
|
| CVE-2018-8440 | Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers | Microsoft | Confirmed | Active | — | about 1 year ago |
PoC
|
| CVE-2021-26085 | Confluence Server, Confluence Data Center | Atlassian | Confirmed | Active | — | about 1 year ago |
PoC
Nuclei
|
| CVE-2021-34486 | Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2 | Microsoft | Confirmed | Active | — | about 1 year ago |
PoC
|
| CVE-2022-0543 | redis | Debian | Confirmed | Active | — | about 1 year ago |
PoC
Nuclei
|
| CVE-2018-10562 | GPON home routers | Dasan | Confirmed | Active | Yes | about 1 year ago |
PoC
Nuclei
VPatch
|
| CVE-2021-21551 | dbutil | Dell | Confirmed | Active | — | about 1 year ago |
PoC
|
| CVE-2021-28799 | HBS 3, HBS 2, HBS 1.3 | QNAP Systems Inc. | Confirmed | Active | — | about 1 year ago |
PoC
Nuclei
|
| CVE-2022-1040 | Sophos Firewall | Sophos | Confirmed | Active | — | about 1 year ago |
PoC
Nuclei
|
| CVE-2021-45382 | DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, DIR-836L routers | D-link | Confirmed | Active | — | about 1 year ago |
PoC
Nuclei
|
| CVE-2022-22965 | Spring Framework | VMware | Confirmed | Active | — | about 1 year ago |
PoC
Nuclei
|