Known Exploited Vulnerabilities catalog
CISA's public list of software flaws attackers are actually using
The US Cybersecurity and Infrastructure Security Agency, CISA, keeps a public list of flaws with evidence of real attacks. A flaw goes on it only when exploitation is confirmed, not just possible. US federal civilian agencies must fix listed flaws by set deadlines. Many companies use the list to decide what to patch first.
Think of it as
A wanted list of burglary methods already used on real houses, not just ones that might work.
Ideas that use this term