Every vulnerability in this list has been confirmed exploited in the wild by CISA and carries a federal remediation deadline under Binding Operational Directive 22-01. Sorted by how soon each patch is due, so the most urgent items surface first. Overdue and due-soon entries are flagged; ransomware-linked vulnerabilities are marked.