Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2022-27518 | Citrix Application Delivery Controller (ADC) and Gateway | 2022-12-13 | 2023-01-03 | ||
| CVE-2022-26925 | Microsoft Windows | 2022-07-01 | 2022-07-22 | ||
| CVE-2022-26923 | Microsoft Active Directory | 2022-08-18 | 2022-09-08 | ||
| CVE-2022-26904 | Microsoft Windows | 2022-04-25 | 2022-05-16 | ||
| CVE-2022-26871 | Trend Micro Apex Central | 2022-03-31 | 2022-04-21 | ||
| CVE-2022-26486 | Mozilla Firefox | 2022-03-07 | 2022-03-21 | ||
| CVE-2022-26485 | Mozilla Firefox | 2022-03-07 | 2022-03-21 | ||
| CVE-2022-26318 | WatchGuard Firebox and XTM Appliances | 2022-03-25 | 2022-04-15 | ||
| CVE-2022-26258 | D-Link DIR-820L | 2022-09-08 | 2022-09-29 | ||
| CVE-2022-26143 | Mitel MiCollab, MiVoice Business Express | 2022-03-25 | 2022-04-15 | ||
| CVE-2022-26138 | Atlassian Confluence | 2022-07-29 | 2022-08-19 | ||
| CVE-2022-2586 | Linux Kernel | 2024-06-26 | 2024-07-17 | ||
| CVE-2022-24816 | OSGeo JAI-EXT | 2024-06-26 | 2024-07-17 | ||
| CVE-2022-24706 | Apache CouchDB | 2022-08-25 | 2022-09-15 | ||
| CVE-2022-24112 | Apache APISIX | 2022-08-25 | 2022-09-15 | ||
| CVE-2022-24086 | Adobe Commerce and Magento Open Source | 2022-02-15 | 2022-03-01 | ||
| CVE-2022-23748 | Audinate Dante Discovery | 2025-02-06 | 2025-02-27 | ||
| CVE-2022-23227 | NUUO NVRmini2 Devices | 2024-12-18 | 2025-01-08 | ||
| CVE-2022-23176 | WatchGuard Firebox and XTM | 2022-04-11 | 2022-05-02 | ||
| CVE-2022-23134 | Zabbix Frontend | 2022-02-22 | 2022-03-08 | ||
| CVE-2022-23131 | Zabbix Frontend | 2022-02-22 | 2022-03-08 | ||
| CVE-2022-22965 | VMware Spring Framework | 2022-04-04 | 2022-04-25 | ||
| CVE-2022-22963 | VMware Tanzu Spring Cloud | 2022-08-25 | 2022-09-15 | ||
| CVE-2022-22960 | VMware Multiple Products | 2022-04-15 | 2022-05-06 | ||
| CVE-2022-22948 | VMware vCenter Server | 2024-07-17 | 2024-08-07 |