Critical Severity
Published: Oct 29, 2026
Exploited and high-severity vulnerabilities (CVE) with CVSS, CISA KEV status, affected versions and sources. JSON, CSV, STIX 2.1.
<p align="center"><img src="assets/banner.png" alt="Exploited Vulnerabilities Dataset: exploited and high-severity CVEs with CVSS, CISA KEV status and sources" width="100%"></p>
# Exploited Vulnerabilities Dataset: exploited and high-severity CVEs with CVSS, CISA KEV status and sources
An open, machine-readable dataset of **93 vulnerabilities (CVEs) that are exploited in the wild (64) or rated high or critical**: vendor, product, flaw type, CVSS, exploitation status, CISA KEV status, affected versions and the public sources each entry is written from. Free to use under CC BY 4.0.
   
Maintained by the [Brandefense](https://brandefense.io) Research Team. Every entry is written from public primary sources (government advisories, MITRE ATT&CK, vendor research) and links to them.
## What is in this dataset
| Dataset | Entries | Files |
|---|---:|---|
| Exploited vulnerabilities (CVE) | 93 | [`data/exploited-vulnerabilities.json`](data/exploited-vulnerabilities.json) ยท [`data/exploited-vulnerabilities.csv`](data/exploited-vulnerabilities.csv) |
Each entry also has a readable page in this repository (linked in the tables below) and a full profile on [brandefense.io](https://brandefense.io/knowledge-hub/vulnerabilities/). A STIX 2.1 bundle of the whole dataset is in [`data/stix/vulnerabilities.stix.json`](data/stix/vulnerabilities.stix.json).
## At a glance
**Vendors with the most CVEs in the dataset.** Count of CVEs per vendor (top 8).
<picture><source media="(prefers-color-scheme: dark)" srcset="assets/vendors-dark.svg"><img src="assets/vendors-light.svg" alt="Vendors with the most CVEs in the dataset" width="820"></picture>
**CVEs by year of the CVE ID.**