CVE Tools
Track your stack

April 2022

2,106 CVEs published, −1% on March 2022 and +7% on April 2021. CISA added 45 to KEV.

2022 month by month

2022, month by month. Point at another month to read it.
2022: CVEs published per month
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2022January 2022: 2,210 CVEs40 added to CISA KEVFebruary 2022: 2,053 CVEs32 added to CISA KEVMarch 2022: 2,136 CVEs226 added to CISA KEVApril 2022: 2,106 CVEs45 added to CISA KEVMay 2022: 2,205 CVEs83 added to CISA KEVJune 2022: 2,302 CVEs48 added to CISA KEVJuly 2022: 2,201 CVEs3 added to CISA KEVAugust 2022: 2,435 CVEs23 added to CISA KEVSeptember 2022: 2,210 CVEs24 added to CISA KEVOctober 2022: 1,936 CVEs12 added to CISA KEVNovember 2022: 2,135 CVEs10 added to CISA KEVDecember 2022: 2,862 CVEs9 added to CISA KEV26,791+18%
Critical
30115% of the 2,069 with a CVSS score
Added to CISA KEV
4514 of this month's CVEs are in KEV, listed a median 109.5 days after publication
Vendors
9303,900 products
Top weakness
XSSCWE-79 · 270 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

  1. 1Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux, Cgal, Linux182221new
  2. 2MicrosoftWindows Server 2022, Windows Server 2016, Windows Server Version 20h218162new
  3. 3Ооо «русбитех-астра»Astra Linux Special Edition, Astra Linux Special Edition Для «эльбрус», Astra Linux Common Edition13861new
  4. 4GoogleAndroid, Google Chrome, Chrome13641new
  5. 5Ао "нппкт"Осон Основа Оnyx111102new
  6. 6DebianDebian Linux1086nonenew
  7. 7UnknownMycred, Visual Form Builder, Salon Booking System Pro9912nonenew
  8. 8OracleMySQL Server, MySQL, Weblogic Server9853new
  9. 9Ао «ивк»Альт 8 Сп, Альт Сп 10782nonenew
  10. 10Ооо «ред Софт»Ред Ос7214nonenew
  11. 11NetappOncommand Insight, Active Iq Unified Manager, Snapcenter610nonenew
  12. 12CiscoCisco IOS XE, IOS XE, Cisco IOS5941new
  13. 13FedoraprojectFedora, Extra Packages For Enterprise Linux583nonenew
  14. 14MavenCom.liferay.portal:release.dxp.bom, Net.sourceforge.htmlunit:neko-htmlunit, Org.owasp.antisamy:antisamy5873new
  15. 15Ао «концерн Вниинс»Ос Он «стрелец»5731new
  16. 16Samsung MobileSamsung Mobile Devices, Galaxy Store, Samsung Flow550nonenew
  17. 17PackagistPimcore/pimcore, Remdex/livehelperchat, Shopware/shopware534nonenew
  18. 18Red HatRed Hat Enterprise Linux, Enterprise Linux, Red Hat Software Collections492nonenew
  19. 19IBMQradar Security Information and Event Manager, Qradar Siem, Cognos Analytics483nonenew
  20. 20CgalComputational Geometry Algorithms Library380nonenew
  21. 21Cgal ProjectLibcgal380nonenew
  22. 22Ао «нтц Ит Роса»Роса Хром, Роса Кобальт, Rosa Virtualization381nonenew
  23. 23DellEmc Powerscale Onefs, Powerscale Onefs, VNX2331nonenew
  24. 24npmFullpage.js, Ghost, Urijs299nonenew
  25. 25FisglobalGt.m283nonenew

Severity

How this month's CVEs score on CVSS; 37 have no score yet. Severity is not exploitation.

  • Critical30115%
  • High91944%
  • Medium79638%
  • Low533%

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. Сообщество Свободного Программного Обеспечения182#1
  2. Microsoft181#2
  3. Ооо «русбитех-астра»138#3
  4. Google136#4
  5. Ао "нппкт"111#5
  6. Debian108#6
  7. Unknown99#7
  8. Oracle98#8
  9. Ао «ивк»78#9
  10. Ооо «ред Софт»72#10

What kind of weakness

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

  1. CWE-79XSS270new
  2. CWE-89SQL Injection149new
  3. CWE-787Out-of-bounds Write121new
  4. CWE-125Out-of-bounds Read88new
  5. CWE-22Path Traversal78new
  6. CWE-20Improper Input Validation71new
  7. CWE-416Use After Free60new
  8. CWE-434Unrestricted File Upload58new
  9. CWE-352CSRF56new
  10. CWE-12941new
  11. CWE-200Information Exposure40new
  12. CWE-78OS Command Injection36new
  13. CWE-287Improper Authentication35new
  14. CWE-476NULL Pointer Dereference35new
  15. CWE-284Improper Access Control32new
  16. CWE-863Incorrect Authorization31new
  17. CWE-122Heap Buffer Overflow30new
  18. CWE-269Improper Privilege Mgmt28new
  19. CWE-362Race Condition28new
  20. CWE-862Missing Authorization23new

Where it landed

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

Which weakness, where

The top weakness classes against the vendors and the sectors that carried them.

Snapshot v1, computed Jun 11, 2026, 06:05 UTC. MethodologyAll months on record

Nuclei coverage and the detection gap are held back while the template mirror is repaired.

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store