The US Cybersecurity and Infrastructure Security Agency publishes cybersecurity resources for defenders. Its Known Exploited Vulnerabilities catalogue lists vulnerabilities known to have been exploited and provides data in downloadable formats.
Use an entry’s identifier and references to identify the affected product, then check the vendor’s guidance and your own inventory before applying a remediation decision.
