2023: 187 exploited CVEs added
Every number below is computed from CISA's Known Exploited Vulnerabilities catalog and refreshed daily. That's -66% versus the same period of 2022 (555).
Adds per month
2023 against 2022. Hover a month for exact counts.
How urgent, how dangerous
Shares of the 187 entries added in 2023.
8 with ≤ 7 daysto the federal due date. Median window is 21 days.
43 ransomware-linkedCISA marks known use in ransomware campaigns.
18 old CVEsassigned 2018 or earlier, newly confirmed exploited.
Top vendors in 2023
Most KEV additions. R = ransomware-linked. Click a vendor for every entry.
Plus 55 more vendors. See all vendors.
Old bugs, new exploitation
CVEs from 2018 or earlier added in 2023. Patch backlogs matter.
| CVE | Vendor / product | Age |
|---|---|---|
| CVE-2004-1464 | Cisco IOS | 19y |
| CVE-2010-3904 | Linux Kernel | 13y |
| CVE-2013-3163 | Microsoft Internet Explorer | 10y |
| CVE-2014-0196 | Linux Kernel | 9y |
| CVE-2014-8361 | Realtek SDK | 9y |
| CVE-2015-2291 | Intel Ethernet Diagnostics Driver for Windows RANSOMWARE | 8y |
| CVE-2015-5317 | Jenkins Jenkins User Interface (UI) | 8y |
| CVE-2016-0165 | Microsoft Win32k | 7y |
| CVE-2016-3427 | Oracle Java SE and JRockit | 7y |
| CVE-2016-6415 | Cisco IOS, IOS XR, and IOS XE | 7y |
| CVE-2016-8735 | Apache Tomcat | 7y |
| CVE-2016-9079 | Mozilla Firefox, Firefox ESR, and Thunderbird | 7y |
| CVE-2017-6742 | Cisco IOS and IOS XE Software | 6y |
| CVE-2017-6884 | Zyxel EMG2926 Routers RANSOMWARE | 6y |
| CVE-2017-7494 | Samba Samba RANSOMWARE | 6y |
Showing the 15 oldest of 18.
Only see the ones that hit your stack.
Pick your vendors. Get a free weekly digest of new KEV entries for just those.
Method: counts use the catalog's dateAdded; "same period" is Jan 1 – 2022-12-31. Due window = dueDate − dateAdded. Data: CISA Known Exploited Vulnerabilities Catalog (CC0). KEV Watch is not affiliated with or endorsed by CISA. Also available as an RSS feed.