Glossary: Vulnerability, Asset and Change Management

KEV (Known Exploited Vulnerabilities)

Also written: KEV, CISA KEV

CISA's list of flaws known to be exploited in the wild. In Kettle & Crane's policy, anything on it is P1 and must be fixed within 2 days.