Weakness / #18
CWE-200: Information exposure in CISA KEV
Exposure of Sensitive Information to an Unauthorized Actor
Answer 25 KEV entries list CWE-200 (Information exposure) as of catalog 2026.09.23, 1.5% of the catalog and rank 18 of 185 weaknesses. The most affected vendor is Microsoft (8).
- KEV entries
- 251.5% of catalog
- Vendors
- 15affected
- Ransomware: known
- 416%
- First added
- 2022-03-03
- Latest added
- 2026-07-27
VVendors
TAdditions by year
| Year | Added |
|---|---|
| 2021 | 0 |
| 2022 | 14 |
| 2023 | 3 |
| 2024 | 4 |
| 2025 | 0 |
| 2026 | 4 |
PProducts
| Product | Entries | Share |
|---|---|---|
| Microsoft Internet Explorer | 4 | 16% |
| Adobe ColdFusion | 2 | 8% |
| Fortinet FortiOS | 1 | 4% |
| Cisco Catalyst SD-WAN Manager | 1 | 4% |
| Vite Vitejs | 1 | 4% |
| Microsoft Windows | 1 | 4% |
| Metabase Metabase | 1 | 4% |
| Check Point Quantum Security Gateways | 1 | 4% |
EAll entries
Cite this
25 CISA KEV entries list CWE-200 (Information exposure), 1.5% of the catalog. Source: Telemetry analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.09.23 (released 2026-09-23). https://glide-telemetry.pages.dev/cwe/cwe-200/
Source: CISA KEV catalog v2026.09.23, released 2026-09-23. Windows end 2026-09-23.