Known Exploited Vulnerability Feed
Evidence-backed KEV intelligence enriched with confidence scoring, exploitation status, CISA KEV status, and sensor telemetry.
2,578
Total KEVs
Known exploited vulnerabilities tracked in KEVIntel
956
Beyond CISA KEV
Additional exploited CVEs tracked beyond CISA KEV
16
KEVs Observed in Sensors (7d)
Tracked KEVs with live exploitation attempts in honeypots
1,676+
Artifacts Available
PoC, Nuclei, and scanner context
| CVE | Product | Vendor | Confidence | Exploitation Status | Sensors | First Seen | Added | Artifacts |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-41064 | macOS, iOS and iPadOS | Apple | Confirmed | Active | — | almost 3 years ago | almost 3 years ago |
PoC
|
| CVE-2023-41061 | iOS and iPadOS, watchOS | Apple | Confirmed | Active | — | almost 3 years ago | almost 3 years ago |
—
|
| CVE-2023-33246 | Apache RocketMQ | Apache Software Foundation | Confirmed | Active | — | almost 3 years ago | almost 3 years ago |
PoC
Nuclei
|
| CVE-2023-38831 | WinRAR | RARLAB | Confirmed | Active | — | almost 3 years ago | almost 3 years ago |
PoC
|
| CVE-2023-32315 | Openfire | igniterealtime | Confirmed | Active | — | almost 3 years ago | almost 3 years ago |
PoC
Nuclei
|
| CVE-2023-38035 | MobileIron Sentry | Ivanti | Confirmed | Active | — | almost 3 years ago | almost 3 years ago |
PoC
Nuclei
|
| CVE-2023-27532 | Veeam Backup & Replication | Veeam | Confirmed | Active | — | almost 3 years ago | almost 3 years ago |
PoC
|
| CVE-2023-26359 | ColdFusion | Adobe | Confirmed | Active | — | almost 3 years ago | almost 3 years ago |
—
|
| CVE-2023-24489 | Citrix ShareFile Storage Zones Controller | Citrix | Confirmed | Active | — | almost 3 years ago | almost 3 years ago |
PoC
Nuclei
|
| CVE-2023-38180 | ASP.NET Core 2.1, .NET 6.0, .NET 7.0, Microsoft Visual Studio 2022 version 17.2, Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.6 | Microsoft | Confirmed | Active | — | almost 3 years ago | almost 3 years ago |
—
|
| CVE-2017-18368 | P660HN-T1A v1 TCLinux Fw | ZyXEL | Confirmed | Active | Yes | almost 3 years ago | almost 3 years ago |
PoC
|
| CVE-2023-35081 | EPMM | Ivanti | Confirmed | Active | — | almost 3 years ago | almost 3 years ago |
—
|
| CVE-2023-37580 | Zimbra Collaboration | Zimbra | Confirmed | Active | — | almost 3 years ago | almost 3 years ago |
PoC
Nuclei
|
| CVE-2023-38606 | tvOS, iOS and iPadOS, macOS, watchOS | Apple | Confirmed | Active | — | almost 3 years ago | almost 3 years ago |
—
|
| CVE-2023-35078 | Endpoint Manager Mobile | Ivanti | Confirmed | Active | — | almost 3 years ago | almost 3 years ago |
PoC
Nuclei
|
| CVE-2023-29298 | ColdFusion | Adobe | Confirmed | Active | — | almost 3 years ago | almost 3 years ago |
PoC
Nuclei
|
| CVE-2023-38205 | ColdFusion | Adobe | Confirmed | Active | — | almost 3 years ago | almost 3 years ago |
PoC
Nuclei
|
| CVE-2023-3519 | NetScaler ADC, NetScaler Gateway | Citrix | Confirmed | Active | — | almost 3 years ago | almost 3 years ago |
PoC
Nuclei
|
| CVE-2023-28121 | WooCommerce Payments | WooCommerce | High | Exploited | — | almost 3 years ago | almost 3 years ago |
PoC
Nuclei
|
| CVE-2023-36884 | Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | Microsoft | Confirmed | Active | — | almost 3 years ago | almost 3 years ago |
PoC
|
| CVE-2022-29303 | Compact | SolarView | Confirmed | Active | — | almost 3 years ago | almost 3 years ago |
PoC
Nuclei
|
| CVE-2023-37450 | Safari, tvOS, iOS and iPadOS, macOS, watchOS | Apple | Confirmed | Active | — | almost 3 years ago | almost 3 years ago |
—
|
| CVE-2023-32046 | Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | Microsoft | Confirmed | Active | — | almost 3 years ago | almost 3 years ago |
—
|
| CVE-2023-32049 | Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) | Microsoft | Confirmed | Active | — | almost 3 years ago | almost 3 years ago |
—
|
| CVE-2023-35311 | Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021, Microsoft Office 2019, Microsoft Outlook 2016, Microsoft Outlook 2013, Microsoft Outlook 2013 Service Pack 1 | Microsoft | Confirmed | Active | — | almost 3 years ago | almost 3 years ago |
—
|