CVEs from 2022 known to be exploited
Entries132
Ransomware-linked37
Avg. lag0.5 yrs
Year added to KEV
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2022-0995 | Linux Kernel | 2026-08-26 | 8.7% | Unknown |
| CVE-2022-0492 | Linux Kernel | 2026-06-02 | 5.5% | Unknown |
| CVE-2022-20775 | Cisco SD-WAN | 2026-02-25 | 12.4% | Unknown |
| CVE-2022-37055 | D-Link Routers | 2025-12-08 | 55.5% | Unknown |
| CVE-2022-48503 | Apple Multiple Products | 2025-10-20 | 3.2% | Unknown |
| CVE-2022-40799 | D-Link DNR-322L | 2025-08-05 | 33.6% | Unknown |
| CVE-2022-43939 | Hitachi Vantara Pentaho Business Analytics (BA) Server | 2025-03-03 | 92.2% | Unknown |
| CVE-2022-43769 | Hitachi Vantara Pentaho Business Analytics (BA) Server | 2025-03-03 | 97.6% | Unknown |
| CVE-2022-23748 | Audinate Dante Discovery | 2025-02-06 | 9.0% | Unknown |
| CVE-2022-23227 | NUUO NVRmini2 Devices | 2024-12-18 | 48.4% | Unknown |
| CVE-2022-21445 | Oracle ADF Faces | 2024-09-18 | 62.4% | Unknown |
| CVE-2022-0185 | Linux Kernel | 2024-08-21 | 25.1% | Unknown |
| CVE-2022-22948 | VMware vCenter Server | 2024-07-17 | 13.2% | Unknown |
| CVE-2022-2586 | Linux Kernel | 2024-06-26 | 10.2% | Unknown |
| CVE-2022-24816 | OSGeo JAI-EXT | 2024-06-26 | 99.9% | Unknown |
| CVE-2022-38028 | Microsoft Windows | 2024-04-23 | 14.9% | Unknown |
| CVE-2022-48618 | Apple Multiple Products | 2024-01-31 | 0.4% | Unknown |
| CVE-2022-22071 | Qualcomm Multiple Chipsets | 2023-12-05 | 0.4% | Unknown |
| CVE-2022-22265 | Samsung Mobile Devices | 2023-09-18 | 0.3% | Unknown |
| CVE-2022-29303 | SolarView Compact | 2023-07-13 | 97.9% | Unknown |
| CVE-2022-31199 | Netwrix Auditor | 2023-07-11 | 36.0% | Known |
| CVE-2022-27926 | Synacor Zimbra Collaboration Suite (ZCS) | 2023-04-03 | 17.6% | Unknown |
| CVE-2022-42948 | Fortra Cobalt Strike | 2023-03-30 | 2.7% | Unknown |
| CVE-2022-39197 | Fortra Cobalt Strike | 2023-03-30 | 46.4% | Unknown |
| CVE-2022-38181 | Arm Mali Graphics Processing Unit (GPU) | 2023-03-30 | 14.0% | Unknown |
| CVE-2022-3038 | Google Chromium Network Service | 2023-03-30 | 24.9% | Unknown |
| CVE-2022-22706 | Arm Mali Graphics Processing Unit (GPU) | 2023-03-30 | 1.0% | Unknown |
| CVE-2022-41328 | Fortinet FortiOS | 2023-03-14 | 10.6% | Unknown |
| CVE-2022-35914 | Teclib GLPI | 2023-03-07 | 99.8% | Unknown |
| CVE-2022-33891 | Apache Spark | 2023-03-07 | 93.2% | Unknown |
| CVE-2022-28810 | Zoho ManageEngine | 2023-03-07 | 70.9% | Unknown |
| CVE-2022-36537 | ZK Framework AuUploader | 2023-02-27 | 95.3% | Known |
| CVE-2022-47986 | IBM Aspera Faspex | 2023-02-21 | 99.9% | Known |
| CVE-2022-41223 | Mitel MiVoice Connect | 2023-02-21 | 10.6% | Known |
| CVE-2022-40765 | Mitel MiVoice Connect | 2023-02-21 | 10.5% | Known |
| CVE-2022-46169 | Cacti Cacti | 2023-02-16 | 99.8% | Unknown |
| CVE-2022-24990 | TerraMaster TerraMaster OS | 2023-02-10 | 83.1% | Known |
| CVE-2022-21587 | Oracle E-Business Suite | 2023-02-02 | 98.3% | Known |
| CVE-2022-47966 | Zoho ManageEngine | 2023-01-23 | 99.7% | Known |
| CVE-2022-44877 | CWP Control Web Panel | 2023-01-17 | 99.9% | Unknown |
| CVE-2022-41080 | Microsoft Exchange Server | 2023-01-10 | 77.3% | Known |
| CVE-2022-42856 | Apple iOS | 2022-12-14 | 8.5% | Unknown |
| CVE-2022-44698 | Microsoft Defender | 2022-12-13 | 76.2% | Known |
| CVE-2022-42475 | Fortinet FortiOS | 2022-12-13 | 99.4% | Known |
| CVE-2022-27518 | Citrix Application Delivery Controller (ADC) and Gateway | 2022-12-13 | 6.6% | Unknown |
| CVE-2022-26501 | Veeam Backup & Replication | 2022-12-13 | 4.1% | Known |
| CVE-2022-26500 | Veeam Backup & Replication | 2022-12-13 | 5.8% | Known |
| CVE-2022-4262 | Google Chromium V8 | 2022-12-05 | 23.5% | Unknown |
| CVE-2022-4135 | Google Chromium GPU | 2022-11-28 | 31.8% | Unknown |
| CVE-2022-41049 | Microsoft Windows | 2022-11-14 | 2.4% | Unknown |
| CVE-2022-41128 | Microsoft Windows | 2022-11-08 | 24.6% | Unknown |
| CVE-2022-41125 | Microsoft Windows | 2022-11-08 | 3.0% | Unknown |
| CVE-2022-41091 | Microsoft Windows | 2022-11-08 | 1.8% | Known |
| CVE-2022-41073 | Microsoft Windows | 2022-11-08 | 2.2% | Known |
| CVE-2022-3723 | Google Chromium V8 | 2022-10-28 | 7.9% | Unknown |
| CVE-2022-42827 | Apple iOS and iPadOS | 2022-10-25 | 1.0% | Unknown |
| CVE-2022-41352 | Synacor Zimbra Collaboration Suite (ZCS) | 2022-10-20 | 95.4% | Known |
| CVE-2022-41033 | Microsoft Windows COM+ Event System Service | 2022-10-11 | 1.8% | Unknown |
| CVE-2022-40684 | Fortinet Multiple Products | 2022-10-11 | 99.9% | Known |
| CVE-2022-41082 | Microsoft Exchange Server | 2022-09-30 | 99.9% | Known |
| CVE-2022-41040 | Microsoft Exchange Server | 2022-09-30 | 99.9% | Known |
| CVE-2022-36804 | Atlassian Bitbucket Server and Data Center | 2022-09-30 | 99.1% | Unknown |
| CVE-2022-3236 | Sophos Firewall | 2022-09-23 | 98.9% | Unknown |
| CVE-2022-35405 | Zoho ManageEngine | 2022-09-22 | 99.9% | Unknown |
| CVE-2022-40139 | Trend Micro Apex One and Apex One as a Service | 2022-09-15 | 3.2% | Unknown |
| CVE-2022-37969 | Microsoft Windows | 2022-09-14 | 28.2% | Known |
| CVE-2022-32917 | Apple iOS, iPadOS, and macOS | 2022-09-14 | 5.6% | Unknown |
| CVE-2022-3075 | Google Chromium Mojo | 2022-09-08 | 5.8% | Unknown |
| CVE-2022-27593 | QNAP Photo Station | 2022-09-08 | 87.9% | Known |
| CVE-2022-26258 | D-Link DIR-820L | 2022-09-08 | 91.9% | Unknown |
| CVE-2022-26352 | dotCMS dotCMS | 2022-08-25 | 91.2% | Known |
| CVE-2022-24706 | Apache CouchDB | 2022-08-25 | 92.5% | Unknown |
| CVE-2022-24112 | Apache APISIX | 2022-08-25 | 96.0% | Unknown |
| CVE-2022-22963 | VMware Tanzu Spring Cloud | 2022-08-25 | 99.9% | Unknown |
| CVE-2022-2294 | WebRTC WebRTC | 2022-08-25 | 70.4% | Known |
| CVE-2022-0028 | Palo Alto Networks PAN-OS | 2022-08-22 | 2.5% | Unknown |
| CVE-2022-32894 | Apple iOS and macOS | 2022-08-18 | 3.2% | Unknown |
| CVE-2022-32893 | Apple iOS and macOS | 2022-08-18 | 9.9% | Unknown |
| CVE-2022-2856 | Google Chromium Intents | 2022-08-18 | 4.5% | Unknown |
| CVE-2022-26923 | Microsoft Active Directory | 2022-08-18 | 83.5% | Unknown |
| CVE-2022-22536 | SAP Multiple Products | 2022-08-18 | 97.9% | Unknown |
| CVE-2022-21971 | Microsoft Windows | 2022-08-18 | 53.9% | Unknown |
| CVE-2022-37042 | Synacor Zimbra Collaboration Suite (ZCS) | 2022-08-11 | 91.8% | Known |
| CVE-2022-27925 | Synacor Zimbra Collaboration Suite (ZCS) | 2022-08-11 | 98.6% | Known |
| CVE-2022-34713 | Microsoft Windows | 2022-08-09 | 67.7% | Unknown |
| CVE-2022-30333 | RARLAB UnRAR | 2022-08-09 | 99.2% | Known |
| CVE-2022-27924 | Synacor Zimbra Collaboration Suite (ZCS) | 2022-08-04 | 93.9% | Known |
| CVE-2022-26138 | Atlassian Confluence | 2022-07-29 | 98.2% | Unknown |
| CVE-2022-22047 | Microsoft Windows | 2022-07-12 | 18.7% | Unknown |
| CVE-2022-26925 | Microsoft Windows | 2022-07-01 | 10.4% | Unknown |
| CVE-2022-29499 | Mitel MiVoice Connect | 2022-06-27 | 55.2% | Known |
| CVE-2022-30190 | Microsoft Windows | 2022-06-14 | 99.1% | Known |
| CVE-2022-26134 | Atlassian Confluence Server/Data Center | 2022-06-02 | 99.9% | Known |
| CVE-2022-20821 | Cisco IOS XR | 2022-05-23 | 11.4% | Unknown |
| CVE-2022-30525 | Zyxel Multiple Firewalls | 2022-05-16 | 99.9% | Unknown |
| CVE-2022-22947 | VMware Spring Cloud Gateway | 2022-05-16 | 98.2% | Unknown |
| CVE-2022-1388 | F5 BIG-IP | 2022-05-10 | 99.9% | Known |
| CVE-2022-29464 | WSO2 Multiple Products | 2022-04-25 | 99.9% | Known |
| CVE-2022-26904 | Microsoft Windows | 2022-04-25 | 16.9% | Unknown |
| CVE-2022-21919 | Microsoft Windows | 2022-04-25 | 2.4% | Unknown |
| CVE-2022-0847 | Linux Kernel | 2022-04-25 | 92.7% | Unknown |
| CVE-2022-22718 | Microsoft Windows | 2022-04-19 | 18.4% | Unknown |
| CVE-2022-22960 | VMware Multiple Products | 2022-04-15 | 35.5% | Unknown |
| CVE-2022-1364 | Google Chromium V8 | 2022-04-15 | 13.7% | Unknown |
| CVE-2022-22954 | VMware Workspace ONE Access and Identity Manager | 2022-04-14 | 99.9% | Known |
| CVE-2022-24521 | Microsoft Windows | 2022-04-13 | 7.0% | Known |
| CVE-2022-23176 | WatchGuard Firebox and XTM | 2022-04-11 | 10.8% | Unknown |
| CVE-2022-22965 | VMware Spring Framework | 2022-04-04 | 99.6% | Unknown |
| CVE-2022-22675 | Apple macOS | 2022-04-04 | 12.4% | Unknown |
| CVE-2022-22674 | Apple macOS | 2022-04-04 | 1.1% | Unknown |
| CVE-2022-26871 | Trend Micro Apex Central | 2022-03-31 | 19.4% | Unknown |
| CVE-2022-1040 | Sophos Firewall | 2022-03-31 | 99.7% | Unknown |
| CVE-2022-1096 | Google Chromium V8 | 2022-03-28 | 24.7% | Unknown |
| CVE-2022-0543 | Redis Debian-specific Redis Servers | 2022-03-28 | 99.3% | Unknown |
| CVE-2022-26318 | WatchGuard Firebox and XTM Appliances | 2022-03-25 | 78.1% | Unknown |
| CVE-2022-26143 | Mitel MiCollab, MiVoice Business Express | 2022-03-25 | 87.3% | Unknown |
| CVE-2022-21999 | Microsoft Windows | 2022-03-25 | 41.0% | Known |
| CVE-2022-26486 | Mozilla Firefox | 2022-03-07 | 2.3% | Unknown |
| CVE-2022-26485 | Mozilla Firefox | 2022-03-07 | 14.2% | Unknown |
| CVE-2022-20708 | Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers | 2022-03-03 | 14.8% | Unknown |
| CVE-2022-20703 | Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers | 2022-03-03 | 9.2% | Unknown |
| CVE-2022-20701 | Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers | 2022-03-03 | 9.7% | Unknown |
| CVE-2022-20700 | Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers | 2022-03-03 | 5.6% | Unknown |
| CVE-2022-20699 | Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers | 2022-03-03 | 72.4% | Unknown |
| CVE-2022-24682 | Synacor Zimbra Collaborate Suite (ZCS) | 2022-02-25 | 30.9% | Known |
| CVE-2022-23134 | Zabbix Frontend | 2022-02-22 | 95.2% | Unknown |
| CVE-2022-23131 | Zabbix Frontend | 2022-02-22 | 95.6% | Unknown |
| CVE-2022-24086 | Adobe Commerce and Magento Open Source | 2022-02-15 | 99.1% | Unknown |
| CVE-2022-0609 | Google Chromium Animation | 2022-02-15 | 22.9% | Unknown |
| CVE-2022-22620 | Apple iOS, iPadOS, and macOS | 2022-02-11 | 16.3% | Unknown |
| CVE-2022-21882 | Microsoft Win32k | 2022-02-04 | 59.2% | Known |
| CVE-2022-22587 | Apple iOS and macOS | 2022-01-28 | 11.6% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
132 CVE-2022 vulnerabilities are in KEV; on average they were listed 0.5 years after the CVE year.