Criminal communications in underground forums offer critical clues about which known CVEs threat actors are most focused on. This, in turn, offers defenders clues on what to watch out for.