CISA has updated its Known Exploited Vulnerabilities (KEV) Catalog, adding seven new vulnerabilities actively being exploited. These newly added vulnerabilities span multiple software products including Microsoft Windows, DirectX, Adobe Acrobat, and Internet Explorer. The vulnerabilities involve issues like buffer overflows, use-after-free, and denial-of-service, enabling malicious cyber activities. CISA recognizes these vulnerabilities as significant risks, particularly for federal organizations. Binding Operational Directive (BOD) 22-01 mandates FCEB agencies remediate these vulnerabilities promptly. The KEV Catalog is a dynamic list intended to inform and protect against known threats. Remediation deadlines are established to reduce exploitable attack surfaces across the federal network. While BOD 22-01 primarily targets federal agencies, CISA encourages all organizations to use the KEV Catalog. Prioritizing remediation of known exploited vulnerabilities is a crucial element of effective cybersecurity. CISA will continue to update the catalog as new vulnerabilities become actively exploited in the wild.