CVE Tools
Sign in
month report

February 2022

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

February 2022 closed with 2,053 published CVEs. 320 criticals, 32 added to CISA KEV (9 ransomware-linked). google led volume, mostly via android. Top weakness class — CWE-79 (243 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
2,053
— MoM— YoY
Severity mix
320 / 805
critical / high
KEV added
32
9 ransomware-linked
Nuclei coverage
13.3%
274 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
1480.7
n=274
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
45
n=16
Detection gap

KEV pressure, no Nuclei coverage

February 2022 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in February 2022

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS787Out-of-bounds Write125Out-of-bounds Read416Use After Free89SQL Injection20Improper Input Validation352CSRF22Path Traversal77Command Injection78OS Command Injectiongoogle261728111сообщество свободного программного обеспечения421829221fedoraproject32051814111ао «нппкт»117730121ооо «русбитех-астра»11562611microsoft corp82211bentley233918debian1144911maven81131053packagist2823631ао «концерн вниинс»1222511pypi467111

Most discussed CVEs — February 2022

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1google—
    172 CVE6 critCVSS 7.4
    NEWKEV 1PoC 26
    android (58) · tensorflow (56) · google chrome (53)
  • 2сообщество свободного программного обеспечения—
    159 CVE15 critCVSS 7.2
    NEWKEV 4Nuclei 8PoC 44
    debian gnu/linux (124) · linux (24) · vim (9)
  • 3fedoraproject—
    133 CVE8 critCVSS 7.2
    NEWNuclei 2PoC 44
    fedora (133) · extra packages for enterprise linux (3)
  • 4ао "нппкт"—
    128 CVE13 critCVSS 7.4
    NEWKEV 3Nuclei 3PoC 33
    осон основа оnyx (128)
  • 5ооо «русбитех-астра»—
    123 CVE5 critCVSS 7.3
    NEWKEV 2Nuclei 3PoC 29
    astra linux special edition (123) · astra linux special edition для «эльбрус» (32) · astra linux common edition (2)
  • 6unknown—
    120 CVE4 critCVSS 6.0
    NEWNuclei 120PoC 55
    supportcandy – helpdesk & support ticket system (5) · link library (3) · ip2location country blocker (3)
  • 7microsoft—
    98 CVE2 critCVSS 7.1
    NEWKEV 4PoC 12
    microsoft edge (50) · windows 11 version 21h2 (22) · windows 11 (22)
  • 8bentley—
    95 CVECVSS 7.0
    NEW
    view (95) · microstation (95) · microstation connect (76)
  • 9debian—
    95 CVE15 critCVSS 7.4
    NEWKEV 2Nuclei 6PoC 30
    debian linux (92) · duck (1) · debian-edu-config (1)
  • 10maven—
    89 CVE12 critCVSS 7.3
    NEWNuclei 8PoC 16
    org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (6) · org.xwiki.platform:xwiki-platform-oldcore (5) · info.magnolia:magnolia-core (5)
  • 11packagist—
    86 CVE8 critCVSS 6.5
    NEWKEV 1Nuclei 17PoC 37
    microweber/microweber (21) · drupal/core (10) · librenms/librenms (7)
  • 12ао «концерн вниинс»—
    77 CVE6 critCVSS 7.8
    NEWKEV 2Nuclei 2PoC 17
    ос он «стрелец» (77)
  • 13pypi—
    75 CVECVSS 6.9
    NEWNuclei 4PoC 18
    tensorflow (59) · tensorflow-cpu (59) · tensorflow-gpu (59)
  • 14intel—
    73 CVECVSS 6.6
    NEW
    killer wi-fi 6e ax1675 firmware (23) · proset wi-fi 6 ax200 firmware (23) · proset wi-fi 6 ax201 firmware (23)
  • 15redhat—
    53 CVE6 critCVSS 7.4
    NEWKEV 1Nuclei 4PoC 16
    enterprise linux (25) · red hat enterprise linux (24) · enterprise linux for ibm z systems (7)
  • 16ооо «ред софт»—
    53 CVE11 critCVSS 7.6
    NEWKEV 2Nuclei 4PoC 16
    ред ос (53)
  • 17netapp—
    48 CVE1 critCVSS 7.0
    NEWKEV 1Nuclei 1PoC 9
    cloud backup (17) · fas\/aff bios (17) · h410s firmware (12)
  • 18go—
    47 CVE5 critCVSS 7.0
    NEWNuclei 2PoC 3
    github.com/go-gitea/gitea (5) · github.com/hashicorp/nomad (4) · github.com/google/fscrypt (3)
  • 19ао «ивк»—
    44 CVE3 critCVSS 7.1
    NEWKEV 1PoC 16
    альт 8 сп (44) · альт сп 10 (8)
  • 20schneider-electric—
    43 CVE11 critCVSS 8.1
    NEWPoC 2
    interactive graphical scada system data server (8) · interactive graphical scada system data collector (6) · wiser for knx firmware (5)
  • 21jenkins—
    42 CVECVSS 7.1
    NEWNuclei 1PoC 4
    pipeline\ (12) · jenkins pipeline: shared groovy libraries plugin (6) · jenkins chef sinatra plugin (3)
  • 22fedora project—
    39 CVE4 critCVSS 7.5
    NEWNuclei 3PoC 12
    fedora (38) · 389 directory server (1)
  • 23siemens—
    37 CVE3 critCVSS 7.7
    NEWNuclei 1PoC 2
    simcenter femap (13) · simcenter femap v2021.1 (11) · simcenter femap v2020.2 (11)
  • 24tensorflow—
    36 CVECVSS 7.0
    NEWPoC 13
    tensorflow (36)
  • 25tenda—
    33 CVE12 critCVSS 8.3
    NEWNuclei 5PoC 19
    ax3 firmware (22) · ac11 firmware (5) · ac9 firmware (4)
  • 26ао «нтц ит роса»—
    33 CVE3 critCVSS 7.0
    NEWPoC 10
    rosa virtualization (17) · роса хром (14) · rosa virtualization 3.0 (2)
  • 27huawei—
    32 CVE13 critCVSS 8.1
    NEW
    emui (26) · magic ui (18) · harmonyos (17)
  • 28npm—
    30 CVE7 critCVSS 7.5
    NEWNuclei 2PoC 7
    url-parse (4) · karma (2) · fastify-multipart (1)
  • 29totolink—
    30 CVE23 critCVSS 9.4
    NEWNuclei 6PoC 9
    t6 firmware (9) · x5000r firmware (6) · a720r firmware (6)
  • 30jetbrains—
    29 CVE7 critCVSS 7.7
    NEWNuclei 1
    teamcity (16) · hub (5) · youtrack (4)
  • 31novell inc.—
    28 CVE3 critCVSS 7.5
    NEWNuclei 1PoC 7
    opensuse leap (23) · suse linux enterprise server (18) · suse linux enterprise server for sap applications (17)
  • 32dlink—
    26 CVE22 critCVSS 9.4
    NEWKEV 1Nuclei 1PoC 3
    di-7200gv2 firmware (8) · di-7200gv2 (8) · dir-823 pro firmware (6)
  • 33linux—
    26 CVE1 critCVSS 6.5
    NEWKEV 1PoC 8
    linux kernel (26)
  • 34samsung mobile—
    26 CVECVSS 4.9
    NEW
    samsung mobile devices (10) · samsung wearable devices (4) · samsung mobile devices with exynos chipsets (3)
  • 35schneider electric—
    26 CVE7 critCVSS 7.8
    NEW
    interactive graphical scada system (9) · modicon m340 cpu bmxp34 (5) · modicon premium processors with integrated ethernet copro tsxp575634 (3)
  • 36cisco—
    25 CVE15 critCVSS 9.4
    NEWKEV 5Nuclei 16PoC 25
    cisco small business rv series router firmware (15) · rv345p firmware (15) · rv345 firmware (15)
  • 37mediatek, inc.—
    24 CVECVSS 6.6
    NEW
    mt8167, mt8175, mt8183, mt8362a, mt8365, mt8385 (10) · mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893, mt8185, mt8789, mt8791, mt8797 (2) · mt6735, mt6737, mt6739, mt6750, mt6750s, mt6753, mt6755, mt6755s, mt6757, mt6757c, mt6757cd, mt6757ch, mt6758, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6795, mt6797, mt6799, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6880, mt6883, mt6885, mt6889, mt6890, mt6891, mt6893, mt8167, mt8168, mt8173, mt8175, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 (1)
  • 38adobe—
    22 CVE2 critCVSS 6.6
    NEWKEV 1Nuclei 1PoC 1
    illustrator 2022 (15) · illustrator 2021 (15) · illustrator (13)
  • 39oracle—
    22 CVE5 critCVSS 7.4
    NEWNuclei 4PoC 7
    zfs storage appliance kit (8) · http server (6) · communications cloud native core binding support function (6)
  • 40tendacn—
    22 CVE9 critCVSS 8.4
    NEWPoC 5
    g3 firmware (21) · g1 firmware (21) · ac10u firmware (1)
  • 41ibm—
    21 CVE1 critCVSS 6.3
    NEW
    maximo anywhere (3) · aix (3) · sterling external authentication server (3)
  • 42microweber—
    21 CVECVSS 5.9
    NEWNuclei 8PoC 11
    microweber (21) · microweber/microweber (21)
  • 43foxitsoftware—
    20 CVE2 critCVSS 8.6
    NEW
    pdf reader (20) · pdf editor (18)
  • 44canonical—
    18 CVECVSS 7.4
    NEWKEV 1PoC 8
    ubuntu linux (12) · ubuntu (11) · snapd (4)
  • 45insyde—
    18 CVECVSS 8.0
    NEW
    insydeh2o (18)
  • 46фссп россии—
    16 CVE8 critCVSS 8.5
    NEWPoC 3
    ос тд аис фссп россии (16)
  • 47radare—
    15 CVE2 critCVSS 7.2
    NEWPoC 8
    radare2 (15)
  • 48sap—
    15 CVE3 critCVSS 7.9
    NEWKEV 1Nuclei 4PoC 1
    3d visual enterprise viewer (3) · netweaver application server java (2) · netweaver abap (2)
  • 49sap se—
    15 CVE3 critCVSS 7.5
    NEWKEV 1Nuclei 4PoC 1
    sap 3d visual enterprise viewer (3) · sap netweaver application server java (2) · sap business objects web intelligence (bi launchpad) (1)
  • 50apache—
    14 CVE3 critCVSS 7.5
    NEWKEV 1Nuclei 4PoC 2
    jspwiki (2) · gobblin (2) · airflow (2)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79243—
2CWE-787197—
3CWE-12599—
4CWE-41687—
5CWE-8974—
6CWE-2065—
7CWE-35265—
8CWE-2252—
9CWE-7748—
10CWE-7844—
11CWE-86243—
12CWE-12138—
13CWE-19038—
14CWE-20036—
15CWE-47635—
16CWE-11929—
17CWE-12029—
18CWE-86328—
19CWE-28425—
20CWE-28724—

Sectors

Solution categories ranked by distinct CVE count this period.

  • OSS Libraries457 CVE
    82 crit1 KEV103 vendorsCVSS 8.2
    org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (6) · info.magnolia:magnolia-core (5) · net.mingsoft:ms-mcms (5)
  • Operating Systems402 CVE
    128 crit186 KEV39 vendorsCVSS 8.2
    fedora (171) · осон основа оnyx (128) · debian gnu/linux (124)
  • Enterprise Software357 CVE
    53 crit17 KEV70 vendorsCVSS 7.8
    cloud backup (17) · fas\/aff bios (17) · h300s firmware (12)
  • Web & CMS Plugins338 CVE
    249 crit3 KEV200 vendorsCVSS 9.5
    microweber (22) · microweber/microweber (21) · core (10)
  • Mobile Apps231 CVE
    38 crit2 KEV6 vendorsCVSS 7.3
    android (58) · tensorflow (56) · google chrome (53)
  • Networking Infrastructure198 CVE
    365 crit78 KEV39 vendorsCVSS 9.0
    ax3 firmware (22) · g1 firmware (21) · g3 firmware (21)
  • Hardware Firmware165 CVE
    186 crit23 vendorsCVSS 8.8
    amt ac 8260 firmware (23) · amt ac 8265 firmware (23) · amt ac 9260 firmware (23)
  • DevTools & CI132 CVE
    21 crit32 vendorsCVSS 8.0
    pipeline\ (12) · jenkins pipeline: shared groovy libraries plugin (6) · rundeck (4)
  • ICS / OT / IoT111 CVE
    69 crit34 vendorsCVSS 8.5
    interactive graphical scada system (9) · interactive graphical scada system data server (8) · interactive graphical scada system data collector (6)
  • Consumer Software76 CVE
    18 crit5 KEV22 vendorsCVSS 8.9
    pdf reader (22) · pdf editor (18) · illustrator 2021 (15)
  • Security Products69 CVE
    20 crit42 vendorsCVSS 7.6
    acronis cyber protect home office (6) · acronis true image 2021 (6) · cyber protect home office (6)
  • Cloud & SaaS65 CVE
    7 crit28 vendorsCVSS 7.3
    vmware cloud foundation (7) · cloud foundation (6) · esxi (5)
  • Databases48 CVE
    19 crit2 KEV18 vendorsCVSS 9.4
    mariadb (26) · zfs storage appliance kit (8) · communications cloud native core binding support function (6)
  • Communications41 CVE
    12 crit2 KEV29 vendorsCVSS 8.3
    pjsip (6) · voipmonitor (3) · asterisk (1)
  • AI / ML38 CVE
    1 crit4 vendorsCVSS 9.8
    tensorflow (36)
  • Unclassified85 CVE
    23 crit59 vendorsCVSS 7.5
    ос тд аис фссп россии (16) · hospital\'s patient records management system (5) · itunesrpc-remastered (5)
Weakness × Sector

Which weaknesses hit which solution categories in February 2022

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS787Out-of-bounds Write125Out-of-bounds Read416Use After Free89SQL Injection20Improper Input Validation352CSRF22Path Traversal77Command Injection78OS Command InjectionOperating Systems54719454142311OSS Libraries531985610191418Web & CMS Plugins13243339174Enterprise Software382439191739811Networking Infrastructure5621222114124Hardware Firmware621810128121Consumer Software22417342712ICS / OT / IoT8296273512DevTools & CI1882419524Security Products8244225