DirectX
No CISA KEV deadline is open. CISA last added a DirectX CVE on 20 May.
Tracked since 20 May · latest article Thu 21 May · RSS
Exploited, by due date
CSV downloadDeadlines passed
4 articles from 2 outlets since 20 May; the latest 157 days ago.
- Article
- First report
- Official notice
Show as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Thu 21 May · 21:32 UTC | Security Affairs | CISA Adds Critical Flaws in Windows, Office, Defender to KEV List |
| Wed 20 May · 20:13 UTC | CISA | CISA logs CVE-2009-1537 DirectX flaw in KEV catalog |
| Wed 20 May · 19:33 UTC | CISA | CISA Adds 2009 DirectX Flaw to KEV After QuickTime Exploit |
| Wed 20 May · 18:02 UTC | CISA | CISA adds seven KEV flaws, including 2026 Microsoft Defender bugs |
Who reported 2 outlets, last 12 months
- CISA3
- Security Affairs1
- CISA Adds Critical Flaws in Windows, Office, Defender to KEV ListSecurity Affairs
- CISA logs CVE-2009-1537 DirectX flaw in KEV catalogCISA · official notice
- CISA Adds 2009 DirectX Flaw to KEV After QuickTime ExploitCISA · official notice
- CISA adds seven KEV flaws, including 2026 Microsoft Defender bugsCISA · official notice
All CVEs in coverage
1How these numbers are made
CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.
CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.
Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.
Product names are grouped by normalised names, with version and edition tails removed.
Fix listed refers to an advisory. Unknown fix status is counted as not listed.