Glossary

Known Exploited Vulnerabilities (KEV)

What Are Known Exploited Vulnerabilities (KEV)?

The Known Exploited Vulnerabilities (KEV) catalog, maintained by CISA, is a list of CVEs that are known to be actively exploited in the wild — treated as the highest-priority subset of vulnerabilities for remediation in U.S. federal agencies and increasingly in private sector programs.

A KEV-listed vulnerability is no longer theoretical: someone, somewhere, is using it against real targets. KEV status is one of the most reliable signals for prioritizing remediation, and is built into modern vulnerability management workflows. NetRise Turbine enriches CVE findings with KEV status so teams focus on exploited, not just exploitable.

Vulnerabilities & RiskHarvest Now, Forge Later (HNFL)Harvest Now, Forge Later (HNFL) is an adversary strategy of collecting signatures and certificates today to forge them once quantum computing derives private keys.Read definition
Vulnerabilities & RiskCWE (Common Weakness Enumeration)A CWE (Common Weakness Enumeration) is a category of underlying software flaw — like buffer overflow or SQL injection — that can lead to vulnerabilities.Read definition
Vulnerabilities & RiskExploit Prediction Scoring System (EPSS)EPSS is a FIRST-maintained probabilistic score estimating the likelihood a CVE will be exploited in the wild within 30 days — prioritizing by real-world risk.Read definition

Known Exploited Vulnerabilities (KEV)

What Are Known Exploited Vulnerabilities (KEV)?

Related Terms

Related Content