KEV 2026.10.301,766 entries+10 in 7d11 open federal deadlinesas of / search ? keys
KEV Now

Weakness / #18

CWE-200: Information exposure in CISA KEV

Exposure of Sensitive Information to an Unauthorized Actor

Catalog
2026.10.30
Rank
#18 of 198
MITRE
CWE-200 definition

Answer 25 KEV entries list CWE-200 (Information exposure) as of catalog 2026.10.30, 1.4% of the catalog and rank 18 of 198 weaknesses. The most affected vendor is Microsoft (8).

KEV entries
251.4% of catalog
Vendors
15affected
Ransomware: known
416%
First added
2022-03-03
Latest added
2026-07-27

VVendors

Vendors with CWE-200 KEV entries
VendorEntriesShare
Microsoft832%
Cisco312%
Adobe28%
Fortinet14%
Vite14%
Metabase14%
Check Point14%
Android14%
Jenkins14%
MinIO14%
Samsung14%
NETGEAR14%

TAdditions by year

CWE-200 KEV additions per yearColumn chart of KEV additions per calendar year. 2021: 0; 2022: 14; 2023: 3; 2024: 4; 2025: 0; 2026: 4.0510152021: 0 added20212022: 14 added1420222023: 3 added320232024: 4 added420242025: 0 added20252026: 4 added (year to date)42026
CWE-200 KEV additions by year
YearAdded
20210
202214
20233
20244
20250
20264

PProducts

Products with CWE-200 KEV entries
ProductEntriesShare
Microsoft Internet Explorer416%
Adobe ColdFusion28%
Fortinet FortiOS14%
Cisco Catalyst SD-WAN Manager14%
Vite Vitejs14%
Microsoft Windows14%
Metabase Metabase14%
Check Point Quantum Security Gateways14%

EAll entries

KEV entries listing CWE-200
CVEVendorProductAddedRansomware
CVE-2025-68686FortinetFortiOSUnknown
CVE-2026-20133CiscoCatalyst SD-WAN ManagerUnknown
CVE-2025-31125ViteVitejsUnknown
CVE-2026-20805MicrosoftWindowsUnknown
CVE-2021-41277MetabaseMetabaseUnknown
CVE-2024-24919Check PointQuantum Security GatewaysKnown
CVE-2023-21237AndroidPixelUnknown
CVE-2020-3259CiscoAdaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Known
CVE-2016-6415CiscoIOS, IOS XR, and IOS XEUnknown
CVE-2015-5317JenkinsJenkins User Interface (UI)Unknown
CVE-2023-28432MinIOMinIOUnknown
CVE-2021-25369SamsungMobile DevicesUnknown
CVE-2017-5521NETGEARMultiple DevicesUnknown
CVE-2016-2388SAPNetWeaverUnknown
CVE-2015-4495MozillaFirefoxUnknown
CVE-2013-7331MicrosoftInternet ExplorerUnknown
CVE-2017-0147MicrosoftSMBv1 serverKnown
CVE-2017-0022MicrosoftXML Core ServicesUnknown
CVE-2016-4655AppleiOSUnknown
CVE-2016-3351MicrosoftInternet Explorer and EdgeKnown
CVE-2016-3298MicrosoftInternet ExplorerUnknown
CVE-2016-0162MicrosoftInternet ExplorerUnknown
CVE-2017-0059MicrosoftInternet ExplorerUnknown
CVE-2013-0631AdobeColdFusionUnknown
CVE-2013-0632AdobeColdFusionUnknown

Cite this

25 CISA KEV entries list CWE-200 (Information exposure), 1.4% of the catalog. Source: KEV Now analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.10.30 (released 2026-10-30). https://kevnow.com/cwe/cwe-200/

Source: CISA KEV catalog v2026.10.30, released 2026-10-30. Windows end 2026-10-30.

Keyboard shortcuts

Keyboard shortcuts
/Focus search
?Show this panel
EscClose panel or clear search
g dGo to Dashboard
g kGo to KEV
g vGo to Vendors
g pGo to Products
g wGo to Weaknesses
g sGo to Stats
g rGo to Regulations
g bGo to Briefings