CVE Tools
Track your stack

July 2022

2,201 CVEs published, −4% on June 2022 and +33% on July 2021. CISA added 3 to KEV.

2022 month by month

2022, month by month. Point at another month to read it.
2022: CVEs published per month
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2022January 2022: 2,210 CVEs40 added to CISA KEVFebruary 2022: 2,053 CVEs32 added to CISA KEVMarch 2022: 2,136 CVEs226 added to CISA KEVApril 2022: 2,106 CVEs45 added to CISA KEVMay 2022: 2,205 CVEs83 added to CISA KEVJune 2022: 2,302 CVEs48 added to CISA KEVJuly 2022: 2,201 CVEs3 added to CISA KEVAugust 2022: 2,435 CVEs23 added to CISA KEVSeptember 2022: 2,210 CVEs24 added to CISA KEVOctober 2022: 1,936 CVEs12 added to CISA KEVNovember 2022: 2,135 CVEs10 added to CISA KEVDecember 2022: 2,862 CVEs9 added to CISA KEV26,791+18%
Critical
28914% of the 2,003 with a CVSS score
Added to CISA KEV
36 of this month's CVEs are in KEV, listed a median 33.5 days after publication
Vendors
8763,203 products
Top weakness
XSSCWE-79 · 230 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

  1. 1GoogleChrome, Google Chrome, Android199103new
  2. 2Ао "нппкт"Осон Основа Оnyx19183new
  3. 3Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux, Linux, Vim175102new
  4. 4MicrosoftMicrosoft Edge, Windows Server 2016, Windows Server Version 20h216332new
  5. 5Ооо «русбитех-астра»Astra Linux Special Edition, Astra Linux Special Edition Для «эльбрус», Astra Linux Common Edition13873new
  6. 6Ао «концерн Вниинс»Ос Он «стрелец»12763new
  7. 7OracleMySQL Server, Database, Security Service963nonenew
  8. 8FedoraprojectFedora, Extra Packages For Enterprise Linux9151new
  9. 9MavenIo.dataease:dataease-plugin-common, Org.jenkins-ci.plugins:openshift-deployer, Org.jenkins-ci.plugins:git7581new
  10. 10DebianDebian Linux684nonenew
  11. 11IBMEngineering Lifecycle Optimization - Publishing, Sterling Partner Engagement Manager On Cloud, Sterling Partner Engagement Manager653nonenew
  12. 12UnknownRequest A Quote, Awin Data Feed, Ninja Forms Contact Form – The Drag and Drop Form Builder For WordPress652nonenew
  13. 13Ао «ивк»Альт 8 Сп, Альт Сп 10622nonenew
  14. 14Ооо «ред Софт»Ред Ос, Ред База Данных622nonenew
  15. 15CiscoCisco Small Business RV Series Router Firmware, RV130 Firmware, RV130W Wireless-N Multifunction VPN Router555nonenew
  16. 16SiemensPads Viewer, Pads Standard/plus Viewer, Sinec Ins513nonenew
  17. 17NetappActive Iq Unified Manager, Oncommand Insight, Snapcenter493nonenew
  18. 18npmUndici, Llhttp, @openzeppelin/contracts499nonenew
  19. 19JenkinsJenkins Openshift Deployer Plugin, Openshift Deployer, Jenkins Coverity Plugin440nonenew
  20. 20Cd FoundationJenkins Deployer Framework Plugin, Jenkins Coverity Plugin, Jenkins Openshift Deployer Plugin420nonenew
  21. 21Samsung MobileSamsung Mobile Devices, Galaxy Store, Findmymobile380nonenew
  22. 22Red HatRed Hat Enterprise Linux, Enterprise Linux, Openshift Container Platform363nonenew
  23. 23PackagistMicroweber/microweber, Moodle/moodle, Idno/known352nonenew
  24. 24Ао «нтц Ит Роса»Роса Хром, Rosa Virtualization, Роса Кобальт350nonenew
  25. 25AdobeAcrobat, Acrobat Dc, Acrobat Reader340nonenew

Severity

How this month's CVEs score on CVSS; 198 have no score yet. Severity is not exploitation.

  • Critical28914%
  • High75538%
  • Medium89245%
  • Low673%

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. Cd Foundation42#20
  2. Samsung Mobile38#21
  3. Mediatek, Inc.27#27
  4. Veritas26#29
  5. Cybozu19#35
  6. Cybozu, Inc.19#36
  7. Sourcecodester17#41
  8. Wavlink17#42
  9. Tenda16#43
  10. Juniper15#46

What kind of weakness

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

  1. CWE-79XSS230—
  2. CWE-787Out-of-bounds Write138+1
  3. CWE-22Path Traversal127+8
  4. CWE-416Use After Free111+10
  5. CWE-89SQL Injection81−3
  6. CWE-125Out-of-bounds Read62—
  7. CWE-78OS Command Injection53+2
  8. CWE-120Buffer Overflow50+13
  9. CWE-352CSRF46−5
  10. CWE-20Improper Input Validation40−3
  11. CWE-476NULL Pointer Dereference36+11
  12. CWE-434Unrestricted File Upload33+4
  13. CWE-862Missing Authorization32−3
  14. CWE-200Information Exposure31−6
  15. CWE-798Hard-coded Credentials28+14
  16. CWE-287Improper Authentication27−1
  17. CWE-863Incorrect Authorization23+3
  18. CWE-502Deserialization22+31
  19. CWE-306Missing Auth for Critical Function21—
  20. CWE-66821+8

Where it landed

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

Which weakness, where

The top weakness classes against the vendors and the sectors that carried them.

Snapshot v1, computed Jun 11, 2026, 06:05 UTC. MethodologyAll months on record

Nuclei coverage and the detection gap are held back while the template mirror is repaired.

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store