Known Exploited Vulnerabilities
Definition
CISA’s catalog of vulnerabilities with evidence of exploitation in the wild.
Why it matters
Treat a new KEV addition as a trigger to confirm product presence and exposure, accelerate safe treatment and consider compromise assessment. KEV does not replace local context.
Use it in practice
Start with authoritative evidence, record the source and freshness, and be explicit about what this term can and cannot tell you. Connect it to asset context and a named action rather than treating it as an isolated label.