Heldnote / KEV
Working set · not the full catalog
Known exploited, as of catalog 2026.11.06.
Each row is a vulnerability CISA has said is being used. The sentence is the class. Pick a row to see its window, what an attacker needs first, and what to check for that kind of product. Build numbers live in the vendor advisory. How to read a row.
Match your own list
Type vendors or products you run, one per line. Matching rows get an orange vendor name, and "Matches my list" filters to them. The list stays in this browser's storage and is never sent anywhere.
| Added | CVE | Vendor | Product | Class | Due | Flags |
|---|
Nothing in the working set matches.
Sources: CISA KEV · catalog totals via Zero Hunt · per-CVE link is NVD. Surface and precondition are the desk's reading of the class line, not CISA fields. Federal due dates bind US civilian agencies. Everyone else can treat them as a sort key.