Every CVE in the CISA KEV catalog, broken out by what it lets an attacker do: exploitability, ransomware association, attack surface, weakness class, and who is targeted — every number traceable to a named public source.