Critical and exploited vulnerabilities, with the checks that tell you if you're exposed

Each advisory covers what's affected, how to check whether the vulnerable path is reachable in your environment, what to do before you patch, and current exploitation status. Advisories are updated as status changes.

We publish when a vulnerability is Critical or on CISA KEV, has one identifiable component to check, and has a public proof of concept or reported exploitation.