Vulnerabilities added to CISA's KEV catalogue since a timestamp — each is confirmed actively exploited (significance 9-10), with the required remediation action and federal due date.