Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2022-41033 | Microsoft Windows COM+ Event System Service | 2022-10-11 | 2022-11-01 | ||
| CVE-2022-40799 | D-Link DNR-322L | 2025-08-05 | 2025-08-26 | ||
| CVE-2022-40139 | Trend Micro Apex One and Apex One as a Service | 2022-09-15 | 2022-10-06 | ||
| CVE-2022-39197 | Fortra Cobalt Strike | 2023-03-30 | 2023-04-20 | ||
| CVE-2022-38181 | Arm Mali Graphics Processing Unit (GPU) | 2023-03-30 | 2023-04-20 | ||
| CVE-2022-38028 | Microsoft Windows | 2024-04-23 | 2024-05-14 | ||
| CVE-2022-3723 | Google Chromium V8 | 2022-10-28 | 2022-11-18 | ||
| CVE-2022-37055 | D-Link Routers | 2025-12-08 | 2025-12-29 | ||
| CVE-2022-36804 | Atlassian Bitbucket Server and Data Center | 2022-09-30 | 2022-10-21 | ||
| CVE-2022-35914 | Teclib GLPI | 2023-03-07 | 2023-03-28 | ||
| CVE-2022-35405 | Zoho ManageEngine | 2022-09-22 | 2022-10-13 | ||
| CVE-2022-34713 | Microsoft Windows | 2022-08-09 | 2022-08-30 | ||
| CVE-2022-33891 | Apache Spark | 2023-03-07 | 2023-03-28 | ||
| CVE-2022-32917 | Apple iOS, iPadOS, and macOS | 2022-09-14 | 2022-10-05 | ||
| CVE-2022-32894 | Apple iOS and macOS | 2022-08-18 | 2022-09-08 | ||
| CVE-2022-32893 | Apple iOS and macOS | 2022-08-18 | 2022-09-08 | ||
| CVE-2022-3236 | Sophos Firewall | 2022-09-23 | 2022-10-14 | ||
| CVE-2022-3075 | Google Chromium Mojo | 2022-09-08 | 2022-09-29 | ||
| CVE-2022-30525 | Zyxel Multiple Firewalls | 2022-05-16 | 2022-06-06 | ||
| CVE-2022-3038 | Google Chromium Network Service | 2023-03-30 | 2023-04-20 | ||
| CVE-2022-29303 | SolarView Compact | 2023-07-13 | 2023-08-03 | ||
| CVE-2022-28810 | Zoho ManageEngine | 2023-03-07 | 2023-03-28 | ||
| CVE-2022-2856 | Google Chromium Intents | 2022-08-18 | 2022-09-08 | ||
| CVE-2022-27926 | Synacor Zimbra Collaboration Suite (ZCS) | 2023-04-03 | 2023-04-24 | ||
| CVE-2022-27518 | Citrix Application Delivery Controller (ADC) and Gateway | 2022-12-13 | 2023-01-03 |