The CISA Known Exploited Vulnerabilities catalog is a list of vulnerabilities that are either actively exploited or have been exploited in the past. In the catalog, you can see the vulnerabilities listed by date added, CVE identifier, a short description of the vulnerability, name of the vendor and product, the due date and the action needed to remediate and significantly strengthen your organization's cyber posture. It does not, however, list the threat actor responsible for exploiting the vulnerability. The CISA KEVs catalog is one of the steps for organizations looking to prioritize remediation for vulnerabilities and implement a vulnerability management program.