CVE Tools
Track your stack

October 2022

1,936 CVEs published, −12% on September 2022 and +10% on October 2021. CISA added 12 to KEV.

2022 month by month

2022, month by month. Point at another month to read it.
2022: CVEs published per month
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2022January 2022: 2,210 CVEs40 added to CISA KEVFebruary 2022: 2,053 CVEs32 added to CISA KEVMarch 2022: 2,136 CVEs226 added to CISA KEVApril 2022: 2,106 CVEs45 added to CISA KEVMay 2022: 2,205 CVEs83 added to CISA KEVJune 2022: 2,302 CVEs48 added to CISA KEVJuly 2022: 2,201 CVEs3 added to CISA KEVAugust 2022: 2,435 CVEs23 added to CISA KEVSeptember 2022: 2,210 CVEs24 added to CISA KEVOctober 2022: 1,936 CVEs12 added to CISA KEVNovember 2022: 2,135 CVEs10 added to CISA KEVDecember 2022: 2,862 CVEs9 added to CISA KEV26,791+18%
Critical
30716% of the 1,878 with a CVSS score
Added to CISA KEV
125 of this month's CVEs are in KEV, listed a median 156 days after publication
Vendors
7173,400 products
Top weakness
Out-of-bounds WriteCWE-787 · 226 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

  1. 1Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux, Linux, Opencats1105nonenew
  2. 2GoogleAndroid, Android Studio, Bazel991nonenew
  3. 3MicrosoftWindows 11 Version 21h2, Windows 11, Windows Server 2022 (Server Core Installation)9414new
  4. 4Ао "нппкт"Осон Основа Оnyx834nonenew
  5. 5OracleMySQL, MySQL Server, Vm VirtualBox8121new
  6. 6Ао «ивк»Альт 8 Сп, Альт Сп 10804nonenew
  7. 7MavenCommons-jxpath:commons-jxpath, Com.liferay.portal:release.dxp.bom, Org.jenkins-ci.plugins:katalon7315nonenew
  8. 8Ооо «русбитех-астра»Astra Linux Special Edition, Astra Linux Special Edition Для «эльбрус», Astra Linux Common Edition692nonenew
  9. 9DebianDebian Linux664nonenew
  10. 10UnknownFrontend File Manager Plugin, Wp Custom Cursors, Wp All Export Pro652nonenew
  11. 11Sap3d Visual Enterprise Author, 3d Visual Enterprise Viewer, Businessobjects Business Intelligence551nonenew
  12. 12Sap SeSap 3d Visual Enterprise Author, Sap 3d Visual Enterprise Viewer, Sap Customer Data Cloud (Gigya)551nonenew
  13. 13FedoraprojectFedora, Supybot-fedora542nonenew
  14. 14Ооо «ред Софт»Ред Ос536nonenew
  15. 15Red HatRed Hat Enterprise Linux, Openshift, Red Hat Software Collections513nonenew
  16. 16NetappOncommand Workflow Automation, Oncommand Insight, Active Iq Unified Manager472nonenew
  17. 17LinuxLinux Kernel, Kernel460nonenew
  18. 18SourcecodesterHuman Resource Management System, Sanitization Management System, Simple Cold Storage Management System400nonenew
  19. 19Abode Systems, Inc.Iota All-in-one Security Kit3824nonenew
  20. 20GoabodeIota All-in-one Security Kit Firmware3824nonenew
  21. 21Unisoc (Shanghai) Technologies Co., Ltd.Sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000380nonenew
  22. 22JuniperJunos, Junos OS Evolved, Paragon Active Assurance Control Center371nonenew
  23. 23AutodeskAutocad Plant 3d, Autocad, Autocad Advance Steel361nonenew
  24. 24Juniper NetworksJunos OS, Junos, Junos OS Evolved360nonenew
  25. 25SiemensScalance W1750D Firmware, Scalance W1750D, Desigo PXM40-1 Firmware3611nonenew

Severity

How this month's CVEs score on CVSS; 58 have no score yet. Severity is not exploitation.

  • Critical30716%
  • High73039%
  • Medium75940%
  • Low824%

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. Сообщество Свободного Программного Обеспечения110#1
  2. Google99#2
  3. Microsoft94#3
  4. Ао "нппкт"83#4
  5. Oracle81#5
  6. Ао «ивк»80#6
  7. Maven73#7
  8. Ооо «русбитех-астра»69#8
  9. Debian66#9
  10. Unknown65#10

What kind of weakness

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

  1. CWE-787Out-of-bounds Write226new
  2. CWE-79XSS202new
  3. CWE-89SQL Injection110new
  4. CWE-119Memory Buffer Bounds76new
  5. CWE-125Out-of-bounds Read63new
  6. CWE-434Unrestricted File Upload62new
  7. CWE-862Missing Authorization59new
  8. CWE-20Improper Input Validation54new
  9. CWE-284Improper Access Control54new
  10. CWE-78OS Command Injection50new
  11. CWE-22Path Traversal49new
  12. CWE-352CSRF42new
  13. CWE-70741new
  14. CWE-416Use After Free40new
  15. CWE-287Improper Authentication37new
  16. CWE-200Information Exposure34new
  17. CWE-502Deserialization33new
  18. CWE-400Resource Consumption29new
  19. CWE-120Buffer Overflow28new
  20. CWE-40127new

Where it landed

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

Which weakness, where

The top weakness classes against the vendors and the sectors that carried them.

Snapshot v1, computed Jun 11, 2026, 06:05 UTC. MethodologyAll months on record

Nuclei coverage and the detection gap are held back while the template mirror is repaired.

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store