CVE Tools
Track your stack

August 2022

2,435 CVEs published, +11% on July 2022 and +5% on August 2021. CISA added 23 to KEV.

2022 month by month

2022, month by month. Point at another month to read it.
2022: CVEs published per month
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2022January 2022: 2,210 CVEs40 added to CISA KEVFebruary 2022: 2,053 CVEs32 added to CISA KEVMarch 2022: 2,136 CVEs226 added to CISA KEVApril 2022: 2,106 CVEs45 added to CISA KEVMay 2022: 2,205 CVEs83 added to CISA KEVJune 2022: 2,302 CVEs48 added to CISA KEVJuly 2022: 2,201 CVEs3 added to CISA KEVAugust 2022: 2,435 CVEs23 added to CISA KEVSeptember 2022: 2,210 CVEs24 added to CISA KEVOctober 2022: 1,936 CVEs12 added to CISA KEVNovember 2022: 2,135 CVEs10 added to CISA KEVDecember 2022: 2,862 CVEs9 added to CISA KEV26,791+18%
Critical
39117% of the 2,323 with a CVSS score
Added to CISA KEV
236 of this month's CVEs are in KEV, listed a median 24 days after publication
Vendors
9314,254 products
Top weakness
Out-of-bounds WriteCWE-787 · 282 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

  1. 1GoogleAndroid, Google Chrome, Chrome22114nonenew
  2. 2Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux, Linux, Vim16951new
  3. 3Ооо «русбитех-астра»Astra Linux Special Edition, Astra Linux Special Edition Для «эльбрус», Astra Linux Common Edition14041new
  4. 4Red HatRed Hat Enterprise Linux, Enterprise Linux, Single Sign-on1304nonenew
  5. 5MicrosoftWindows 10, Windows 10 21h2, Windows 10 20h212631new
  6. 6Ао "нппкт"Осон Основа Оnyx1163nonenew
  7. 7FedoraprojectFedora, Extra Packages For Enterprise Linux11321new
  8. 8UnknownTransposh WordPress Translation, Yaysmtp – Simple Wp Smtp Mail, Givewp – Donation Plugin and Fundraising Platform1036nonenew
  9. 9SourcecodesterGym Management System, Company Website CMS, Simple E-learning System870nonenew
  10. 10DebianDebian Linux, Schroot6931new
  11. 11H3CMagic NX18 Plus Firmware, Gr-1200w Firmware, H200 Firmware6733nonenew
  12. 12MavenOrg.dspace:dspace-jspui, Org.apache.jspwiki:jspwiki-main, Org.keycloak:keycloak-core6491new
  13. 13Ао «ивк»Альт 8 Сп, Альт Сп 10641nonenew
  14. 14Ооо «ред Софт»Ред Ос603nonenew
  15. 15IntelWi-fi 6 AX201 Firmware, Wi-fi 6 AX200 Firmware, Wireless-ac 9462 Firmware594nonenew
  16. 16npm@openzeppelin/contracts, @openzeppelin/contracts-upgradeable, Raneto5314nonenew
  17. 17TendaAC1206 Firmware, M3 Firmware, AX1803 Firmware5224nonenew
  18. 18LinuxLinux Kernel450nonenew
  19. 19Novell Inc.Opensuse Leap, Suse Linux Enterprise Server, Suse Linux Enterprise Server For Sap Applications452nonenew
  20. 20PackagistMagento/community-edition, Forkcms/forkcms, Getkirby/cms454nonenew
  21. 21TclLinkhub Mesh Wifi, Linkhub Mesh Wifi AC12004236nonenew
  22. 22TotolinkA7000R Firmware, N350RT Firmware, A3700R Firmware423nonenew
  23. 23Otfcc ProjectOtfcc380nonenew
  24. 24Samsung MobileSamsung Mobile Devices, Charm By Samsung, Galaxy Wearable330nonenew
  25. 25CanonicalUbuntu, Ubuntu Linux290nonenew

Severity

How this month's CVEs score on CVSS; 112 have no score yet. Severity is not exploitation.

  • Critical39117%
  • High86837%
  • Medium96942%
  • Low954%

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. Google221#1
  2. Сообщество Свободного Программного Обеспечения169#2
  3. Ооо «русбитех-астра»140#3
  4. Red Hat130#4
  5. Microsoft126#5
  6. Ао "нппкт"116#6
  7. Fedoraproject113#7
  8. Unknown103#8
  9. Sourcecodester87#9
  10. Debian69#10

What kind of weakness

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

  1. CWE-787Out-of-bounds Write282new
  2. CWE-79XSS241new
  3. CWE-89SQL Injection181new
  4. CWE-125Out-of-bounds Read66new
  5. CWE-862Missing Authorization65new
  6. CWE-416Use After Free62new
  7. CWE-20Improper Input Validation59new
  8. CWE-78OS Command Injection59new
  9. CWE-120Buffer Overflow58new
  10. CWE-22Path Traversal58new
  11. CWE-352CSRF53new
  12. CWE-200Information Exposure44new
  13. CWE-269Improper Privilege Mgmt41new
  14. CWE-476NULL Pointer Dereference35new
  15. CWE-284Improper Access Control34new
  16. CWE-287Improper Authentication33new
  17. CWE-400Resource Consumption31new
  18. CWE-770Allocation Without Limits31new
  19. CWE-434Unrestricted File Upload30new
  20. CWE-119Memory Buffer Bounds27new

Where it landed

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

Which weakness, where

The top weakness classes against the vendors and the sectors that carried them.

Snapshot v1, computed Jun 11, 2026, 06:05 UTC. MethodologyAll months on record

Nuclei coverage and the detection gap are held back while the template mirror is repaired.

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store