Known exploited vulnerability tracking

The practice of recording which disclosed vulnerabilities are being used in real attacks, including government catalogues and vendor telemetry that patch programmes rely on for prioritisation.