The listing is called the Known Exploited Vulnerabilities Catalog and was started on may 23 when 21 actively exploited security flaws were added to the listing, On May 24 and 25, there were additions of 20 and 34 flaws respectively. The vulnerabilities range in date of initial disclosure, impacted products, and applications, however, they are all related through the fact that the CISA has identified active exploitation by cyberattackers. The CISA urges organizations to sift through the Catalog vulnerabilities and apply patches when necessary as part of vulnerability management practice.