Use the numbered entries for impact, potential exposure, required actions and linked primary evidence. Operational priority is conditional on your environment being affected.
Priority guide. Critical means act now if exposed; High means establish applicability and an owner today. An asterisk highlights especially conditional exposure. These are editorial operational judgments, not CVSS scores or a universal ranking of vendors.
Explore the register
- Issue index 01 to 14Use the numbered entries for impact, potential exposure, required actions and linked primary evidence. Operational priority is conditional on your environment being affected.Priority guide. Critical means act now if expo
- Issue index 15 to 28Use the numbered entries for impact, potential exposure, required actions and linked primary evidence. Operational priority is conditional on your environment being affected.Priority guide. Critical means act now if expo
- Runtime and infrastructureRead the individual entries for impact, potential exposure, required actions and primary evidence. Operational priority depends on actual exposure.
- AI operations and procurementRead the individual entries for impact, potential exposure, required actions and primary evidence. Operational priority depends on actual exposure.
- Agent governance and certificate trustRead the individual entries for impact, potential exposure, required actions and primary evidence. Operational priority depends on actual exposure.
- AI service credentialsRead the individual entries for impact, potential exposure, required actions and primary evidence. Operational priority depends on actual exposure.
- Cloud data and AI supply chainsRead the individual entries for impact, potential exposure, required actions and primary evidence. Operational priority depends on actual exposure.
- Device claims and legacy systemsRead the individual entries for impact, potential exposure, required actions and primary evidence. Operational priority depends on actual exposure.
- AI operations and software assuranceRead the individual entries for impact, potential exposure, required actions and primary evidence. Operational priority depends on actual exposure.
- Runtime and network controlsRead the individual entries for impact, potential exposure, required actions and primary evidence. Operational priority depends on actual exposure.
- Cloud platform incidentsRead the individual entries for impact, potential exposure, required actions and primary evidence. Operational priority depends on actual exposure.
- Compromised official releasesRead the individual entries for impact, potential exposure, required actions and primary evidence. Operational priority depends on actual exposure.
- Website management and cloud backupRead the individual entries for impact, potential exposure, required actions and primary evidence. Operational priority depends on actual exposure.
- Compromised npm packagesRead the individual entries for impact, potential exposure, required actions and primary evidence. Operational priority depends on actual exposure.
- Repository access and certificate remediationRead the individual entries for impact, potential exposure, required actions and primary evidence. Operational priority depends on actual exposure.
- Additional research and critical patchesRead the individual entries for impact, potential exposure, required actions and primary evidence. Operational priority depends on actual exposure.