actively exploited vulnerability

Definition of actively exploited vulnerability from Regulation (EU) 2024/2847, Article 3, point (42).

Defined term	actively exploited vulnerability
Source	CRA
Reference	Article 3, point (42)
Status	Published
Refresh rule	Regenerate after source legal-text changes

Definition

(42) actively exploited vulnerability means a vulnerability for which there is reliable evidence that a malicious actor has exploited it in a system without permission of the system owner;

Source

CRA, Article 3, point (42).