Additions to the CISA KEV catalog per month. Listing means confirmed exploitation, not merely a severe score.
| Period | KEV additions (vulnerabilities) |
|---|---|
| 2021-11-01 | 291.0 |
| 2021-12-01 | 20.0 |
| 2022-01-01 | 40.0 |
| 2022-02-01 | 32.0 |
| 2022-03-01 | 226.0 |
| 2022-04-01 | 45.0 |
| 2022-05-01 | 83.0 |
| 2022-06-01 | 48.0 |
| 2022-07-01 | 3 |
| 2022-08-01 | 23.0 |
| 2022-09-01 | 24.0 |
| 2022-10-01 | 12.0 |
| 2022-11-01 | 10.0 |
| 2022-12-01 | 9 |
| 2023-01-01 | 5 |
| 2023-02-01 | 14.0 |
| 2023-03-01 | 18.0 |
| 2023-04-01 | 17.0 |
| 2023-05-01 | 19.0 |
| 2023-06-01 | 24.0 |
| 2023-07-01 | 16.0 |
| 2023-08-01 | 8 |
| 2023-09-01 | 19.0 |
| 2023-10-01 | 18.0 |
| 2023-11-01 | 18.0 |
| 2023-12-01 | 11.0 |
| 2024-01-01 | 21.0 |
| 2024-02-01 | 9 |
| 2024-03-01 | 10.0 |
| 2024-04-01 | 10.0 |
| 2024-05-01 | 14.0 |
| 2024-06-01 | 9 |
| 2024-07-01 | 14.0 |
| 2024-08-01 | 19.0 |
| 2024-09-01 | 25.0 |
| 2024-10-01 | 17.0 |
| 2024-11-01 | 22.0 |
| 2024-12-01 | 16.0 |
| 2025-01-01 | 14.0 |
| 2025-02-01 | 27.0 |
| 2025-03-01 | 32.0 |
| 2025-04-01 | 15.0 |
| 2025-05-01 | 24.0 |
| 2025-06-01 | 20.0 |
| 2025-07-01 | 20.0 |
| 2025-08-01 | 15.0 |
| 2025-09-01 | 16.0 |
| 2025-10-01 | 31.0 |
| 2025-11-01 | 11.0 |
| 2025-12-01 | 20.0 |
| 2026-01-01 | 17.0 |
| 2026-02-01 | 28.0 |
| 2026-03-01 | 26.0 |
| 2026-04-01 | 31.0 |
| 2026-05-01 | 21.0 |
| 2026-06-01 | 23.0 |
| 2026-07-01 | 26.0 |
| 2026-08-01 | 31.0 |
| 2026-09-01 | 24.0 |
Source: CISA · retrieved 17 Sep 2026 · Public domain (US Government)