month report
February 2022
Data as of Jun 4, 2026, 13:25 UTCSnapshot v1 Sources NVD+CISA KEV+EPSS+Nuclei templates Methodology →
February 2022 closed with 2,053 published CVEs. 320 criticals, 32 added to CISA KEV (9 ransomware-linked). google led volume, mostly via android. Top weakness class — CWE-79 (243 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
2,053
— MoM— YoY
Severity mix
320 / 805
critical / high
KEV added
32
9 ransomware-linked
Nuclei coverage
13.3%
274 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
1480.7
n=274
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
45
n=16
Detection gap
KEV pressure, no Nuclei coverage
February 2022 · vendors with active exploitation listed by CISA but no public detection template.
- KEV 4microsoft corp98 CVE
- KEV 3microsoft51 CVE
- KEV 1google169 CVE
- KEV 1google inc53 CVE
- KEV 1ао «ивк»44 CVE
- KEV 1redhat32 CVE
- KEV 1linux26 CVE
Weakness × Vendor
What's spreading where in February 2022
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
79XSS787Out-of-bounds Write125Out-of-bounds Read416Use After Free89SQL Injection20Improper Input Validation352CSRF22Path Traversal77Command Injection78OS Command Injectiongoogle261728111сообщество свободного программного обеспечения421829221fedoraproject32051814111ао "нппкт"117730121ооо «русбитех-астра»11562611unknown5914265microsoft corp82211bentley233918debian1144911maven81131053packagist2823631ао «концерн вниинс»1222511
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #1google169 CVE
- #2сообщество свободного программного обеспечения159 CVE
- #3fedoraproject133 CVE
- #4ао "нппкт"128 CVE
- #5ооо «русбитех-астра»123 CVE
- #6unknown120 CVE
- #7microsoft corp98 CVE
- #8bentley95 CVE
- #9debian95 CVE
- #10maven89 CVE
Top vendors
Ranked by distinct CVE count this period.
- 169 CVE6 critCVSS 7.2NEWKEV 1PoC 26android (58) · tensorflow (56) · chrome (50)
- 159 CVE15 critCVSS 7.2NEWKEV 4Nuclei 8PoC 44debian gnu/linux (124) · linux (24) · vim (9)
- 133 CVE8 critCVSS 7.2NEWNuclei 2PoC 44fedora (133) · extra packages for enterprise linux (3)
- 128 CVE13 critCVSS 7.4NEWKEV 3Nuclei 3PoC 33осон основа оnyx (128)
- 123 CVE5 critCVSS 7.3NEWKEV 2Nuclei 3PoC 29astra linux special edition (123) · astra linux special edition для «эльбрус» (32) · astra linux common edition (2)
- 120 CVE4 critCVSS 6.0NEWNuclei 120PoC 55supportcandy – helpdesk & support ticket system (5) · link library (3) · ip2location country blocker (3)
- 98 CVE2 critCVSS 7.1NEWKEV 4PoC 12microsoft edge (50) · windows 10 1909 (21) · windows 10 20h2 (21)
- 95 CVECVSS 7.0NEWmicrostation (95) · view (95) · microstation connect (76)
- 95 CVE15 critCVSS 7.4NEWKEV 2Nuclei 6PoC 30debian linux (92) · duck (1) · debian-edu-config (1)
- 89 CVE12 critCVSS 7.3NEWNuclei 8PoC 16org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (6) · info.magnolia:magnolia-core (5) · org.xwiki.platform:xwiki-platform-oldcore (5)
- 86 CVE8 critCVSS 6.5NEWKEV 1Nuclei 17PoC 37microweber/microweber (21) · drupal/core (10) · librenms/librenms (7)
- 77 CVE6 critCVSS 7.8NEWKEV 2Nuclei 2PoC 17ос он «стрелец» (77)
- 75 CVECVSS 6.9NEWNuclei 4PoC 18tensorflow (59) · tensorflow-cpu (59) · tensorflow-gpu (59)
- 73 CVECVSS 6.6NEWamt wi-fi 6 ax201 firmware (23) · amt wi-fi 6 ax210 firmware (23) · proset ac 9560 firmware (23)
- 53 CVE2 critCVSS 7.8NEWKEV 1PoC 10google chrome (53)
- 53 CVE11 critCVSS 7.6NEWKEV 2Nuclei 4PoC 16ред ос (53)
- 51 CVECVSS 7.1NEWKEV 3PoC 2windows 11 version 21h2 (22) · windows 10 version 1909 (21) · windows 10 version 21h1 (21)
- 48 CVE1 critCVSS 7.0NEWKEV 1Nuclei 1PoC 9cloud backup (17) · fas\/aff bios (17) · h410s firmware (12)
- 47 CVE5 critCVSS 7.0NEWNuclei 2PoC 3github.com/go-gitea/gitea (5) · github.com/hashicorp/nomad (4) · github.com/google/fscrypt (3)
- 44 CVE3 critCVSS 7.1NEWKEV 1PoC 16альт 8 сп (44) · альт сп 10 (8)
- 43 CVE11 critCVSS 8.1NEWPoC 2interactive graphical scada system data server (8) · interactive graphical scada system data collector (6) · wiser for knx firmware (5)
- 42 CVECVSS 7.1NEWNuclei 1PoC 4pipeline\ (12) · chef sinatra (3) · autonomiq (2)
- 41 CVECVSS 7.1NEWPoC 3jenkins pipeline: shared groovy libraries plugin (6) · jenkins chef sinatra plugin (3) · jenkins pipeline: groovy plugin (3)
- 39 CVE4 critCVSS 7.5NEWNuclei 3PoC 12fedora (38) · 389 directory server (1)
- 37 CVE3 critCVSS 7.7NEWNuclei 1PoC 2simcenter femap (13) · simcenter femap v2021.1 (11) · simcenter femap v2020.2 (11)
- 36 CVECVSS 7.0NEWPoC 13tensorflow (36)
- 33 CVE12 critCVSS 8.3NEWNuclei 5PoC 19ax3 firmware (22) · ac11 firmware (5) · ac9 firmware (4)
- 33 CVE3 critCVSS 7.0NEWPoC 10rosa virtualization (17) · роса хром (14) · rosa virtualization 3.0 (2)
- 32 CVE13 critCVSS 8.1NEWemui (26) · magic ui (18) · harmonyos (17)
- 32 CVE4 critCVSS 7.3NEWKEV 1PoC 8enterprise linux (25) · enterprise linux for power little endian (7) · enterprise linux for ibm z systems (7)
- 30 CVE7 critCVSS 7.5NEWNuclei 2PoC 7url-parse (4) · karma (2) · fastify-multipart (1)
- 30 CVE23 critCVSS 9.4NEWNuclei 6PoC 9t6 firmware (9) · x5000r firmware (6) · a720r firmware (6)
- 29 CVE7 critCVSS 7.7NEWNuclei 1teamcity (16) · hub (5) · youtrack (4)
- 29 CVE2 critCVSS 7.5NEWKEV 1Nuclei 4PoC 10red hat enterprise linux (24) · red hat software collections (7) · red hat quay (6)
- 28 CVE3 critCVSS 7.5NEWNuclei 1PoC 7opensuse leap (23) · suse linux enterprise server (18) · suse linux enterprise server for sap applications (17)
- 26 CVE22 critCVSS 9.4NEWKEV 1Nuclei 1PoC 3di-7200gv2 firmware (8) · dir-823 pro firmware (6) · dir-882 firmware (3)
- 26 CVE22 critCVSS 9.4NEWKEV 1Nuclei 1PoC 3di-7200gv2 (8) · dir-823-pro (6) · dir-x1860 (3)
- 26 CVE1 critCVSS 6.5NEWKEV 1PoC 8linux kernel (26)
- 26 CVECVSS 4.9NEWsamsung mobile devices (10) · samsung wearable devices (4) · samsung mobile devices with exynos chipsets (3)
- 26 CVE7 critCVSS 7.8NEWinteractive graphical scada system (9) · modicon m340 cpu bmxp34 (5) · modicon premium processors with integrated ethernet copro tsxp575634 (3)
- 25 CVE15 critCVSS 9.4NEWKEV 5Nuclei 16PoC 25rv345p firmware (15) · rv345 firmware (15) · rv340w firmware (15)
- 25 CVE15 critCVSS 9.5NEWKEV 5Nuclei 16PoC 25cisco rv345p (15) · cisco small business rv340 (15) · cisco rv340w (15)
- 24 CVECVSS 6.6NEWmt8167, mt8175, mt8183, mt8362a, mt8365, mt8385 (10) · mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893, mt8185, mt8789, mt8791, mt8797 (2) · mt6735, mt6737, mt6739, mt6750, mt6750s, mt6753, mt6755, mt6755s, mt6757, mt6757c, mt6757cd, mt6757ch, mt6758, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6795, mt6797, mt6799, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6880, mt6883, mt6885, mt6889, mt6890, mt6891, mt6893, mt8167, mt8168, mt8173, mt8175, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 (1)
- 22 CVE2 critCVSS 6.7NEWKEV 1Nuclei 1PoC 1illustrator 2021 (15) · illustrator 2022 (15) · photoshop 2022 (2)
- 22 CVE5 critCVSS 7.4NEWNuclei 4PoC 7zfs storage appliance kit (8) · communications cloud native core binding support function (6) · http server (6)
- 22 CVE9 critCVSS 8.4NEWPoC 5g1 firmware (21) · g3 firmware (21) · ac10u firmware (1)
- 21 CVE1 critCVSS 6.3NEWmaximo anywhere (3) · aix (3) · sterling external authentication server (3)
- 21 CVECVSS 5.9NEWNuclei 8PoC 11microweber (21) · microweber/microweber (21)
- 20 CVE2 critCVSS 8.6NEWpdf reader (20) · pdf editor (18)
- 18 CVE1 critCVSS 6.4NEWKEV 1Nuclei 1illustrator (13) · creative cloud desktop application (1) · after effects (1)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | 169 | 6 | 1 | · | NEWKEV 1PoC 26 | android (58) · tensorflow (56) · chrome (50) | — | ||
| 2 | сообщество свободного программного обеспечения | 159 | 15 | 4 | 8 | NEWKEV 4Nuclei 8PoC 44 | debian gnu/linux (124) · linux (24) · vim (9) | — | |
| 3 | fedoraproject | 133 | 8 | · | 2 | NEWNuclei 2PoC 44 | fedora (133) · extra packages for enterprise linux (3) | — | |
| 4 | ао "нппкт" | 128 | 13 | 3 | 3 | NEWKEV 3Nuclei 3PoC 33 | осон основа оnyx (128) | — | |
| 5 | ооо «русбитех-астра» | 123 | 5 | 2 | 3 | NEWKEV 2Nuclei 3PoC 29 | astra linux special edition (123) · astra linux special edition для «эльбрус» (32) · astra linux common edition (2) | — | |
| 6 | unknown | 120 | 4 | · | 120 | NEWNuclei 120PoC 55 | supportcandy – helpdesk & support ticket system (5) · link library (3) · ip2location country blocker (3) | — | |
| 7 | microsoft corp | 98 | 2 | 4 | · | NEWKEV 4PoC 12 | microsoft edge (50) · windows 10 1909 (21) · windows 10 20h2 (21) | — | |
| 8 | bentley | 95 | · | · | · | NEW | microstation (95) · view (95) · microstation connect (76) | — | |
| 9 | debian | 95 | 15 | 2 | 6 | NEWKEV 2Nuclei 6PoC 30 | debian linux (92) · duck (1) · debian-edu-config (1) | — | |
| 10 | maven | 89 | 12 | · | 8 | NEWNuclei 8PoC 16 | org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (6) · info.magnolia:magnolia-core (5) · org.xwiki.platform:xwiki-platform-oldcore (5) | — | |
| 11 | packagist | 86 | 8 | 1 | 17 | NEWKEV 1Nuclei 17PoC 37 | microweber/microweber (21) · drupal/core (10) · librenms/librenms (7) | — | |
| 12 | ао «концерн вниинс» | 77 | 6 | 2 | 2 | NEWKEV 2Nuclei 2PoC 17 | ос он «стрелец» (77) | — | |
| 13 | pypi | 75 | · | · | 4 | NEWNuclei 4PoC 18 | tensorflow (59) · tensorflow-cpu (59) · tensorflow-gpu (59) | — | |
| 14 | intel | 73 | · | · | · | NEW | amt wi-fi 6 ax201 firmware (23) · amt wi-fi 6 ax210 firmware (23) · proset ac 9560 firmware (23) | — | |
| 15 | google inc | 53 | 2 | 1 | · | NEWKEV 1PoC 10 | google chrome (53) | — | |
| 16 | ооо «ред софт» | 53 | 11 | 2 | 4 | NEWKEV 2Nuclei 4PoC 16 | ред ос (53) | — | |
| 17 | microsoft | 51 | · | 3 | · | NEWKEV 3PoC 2 | windows 11 version 21h2 (22) · windows 10 version 1909 (21) · windows 10 version 21h1 (21) | — | |
| 18 | netapp | 48 | 1 | 1 | 1 | NEWKEV 1Nuclei 1PoC 9 | cloud backup (17) · fas\/aff bios (17) · h410s firmware (12) | — | |
| 19 | go | 47 | 5 | · | 2 | NEWNuclei 2PoC 3 | github.com/go-gitea/gitea (5) · github.com/hashicorp/nomad (4) · github.com/google/fscrypt (3) | — | |
| 20 | ао «ивк» | 44 | 3 | 1 | · | NEWKEV 1PoC 16 | альт 8 сп (44) · альт сп 10 (8) | — | |
| 21 | schneider-electric | 43 | 11 | · | · | NEWPoC 2 | interactive graphical scada system data server (8) · interactive graphical scada system data collector (6) · wiser for knx firmware (5) | — | |
| 22 | jenkins | 42 | · | · | 1 | NEWNuclei 1PoC 4 | pipeline\ (12) · chef sinatra (3) · autonomiq (2) | — | |
| 23 | jenkins project | 41 | · | · | · | NEWPoC 3 | jenkins pipeline: shared groovy libraries plugin (6) · jenkins chef sinatra plugin (3) · jenkins pipeline: groovy plugin (3) | — | |
| 24 | fedora project | 39 | 4 | · | 3 | NEWNuclei 3PoC 12 | fedora (38) · 389 directory server (1) | — | |
| 25 | siemens | 37 | 3 | · | 1 | NEWNuclei 1PoC 2 | simcenter femap (13) · simcenter femap v2021.1 (11) · simcenter femap v2020.2 (11) | — | |
| 26 | tensorflow | 36 | · | · | · | NEWPoC 13 | tensorflow (36) | — | |
| 27 | tenda | 33 | 12 | · | 5 | NEWNuclei 5PoC 19 | ax3 firmware (22) · ac11 firmware (5) · ac9 firmware (4) | — | |
| 28 | ао «нтц ит роса» | 33 | 3 | · | · | NEWPoC 10 | rosa virtualization (17) · роса хром (14) · rosa virtualization 3.0 (2) | — | |
| 29 | huawei | 32 | 13 | · | · | NEW | emui (26) · magic ui (18) · harmonyos (17) | — | |
| 30 | redhat | 32 | 4 | 1 | · | NEWKEV 1PoC 8 | enterprise linux (25) · enterprise linux for power little endian (7) · enterprise linux for ibm z systems (7) | — | |
| 31 | npm | 30 | 7 | · | 2 | NEWNuclei 2PoC 7 | url-parse (4) · karma (2) · fastify-multipart (1) | — | |
| 32 | totolink | 30 | 23 | · | 6 | NEWNuclei 6PoC 9 | t6 firmware (9) · x5000r firmware (6) · a720r firmware (6) | — | |
| 33 | jetbrains | 29 | 7 | · | 1 | NEWNuclei 1 | teamcity (16) · hub (5) · youtrack (4) | — | |
| 34 | red hat inc. | 29 | 2 | 1 | 4 | NEWKEV 1Nuclei 4PoC 10 | red hat enterprise linux (24) · red hat software collections (7) · red hat quay (6) | — | |
| 35 | novell inc. | 28 | 3 | · | 1 | NEWNuclei 1PoC 7 | opensuse leap (23) · suse linux enterprise server (18) · suse linux enterprise server for sap applications (17) | — | |
| 36 | dlink | 26 | 22 | 1 | 1 | NEWKEV 1Nuclei 1PoC 3 | di-7200gv2 firmware (8) · dir-823 pro firmware (6) · dir-882 firmware (3) | — | |
| 37 | d-link corp. | 26 | 22 | 1 | 1 | NEWKEV 1Nuclei 1PoC 3 | di-7200gv2 (8) · dir-823-pro (6) · dir-x1860 (3) | — | |
| 38 | linux | 26 | 1 | 1 | · | NEWKEV 1PoC 8 | linux kernel (26) | — | |
| 39 | samsung mobile | 26 | · | · | · | NEW | samsung mobile devices (10) · samsung wearable devices (4) · samsung mobile devices with exynos chipsets (3) | — | |
| 40 | schneider electric | 26 | 7 | · | · | NEW | interactive graphical scada system (9) · modicon m340 cpu bmxp34 (5) · modicon premium processors with integrated ethernet copro tsxp575634 (3) | — | |
| 41 | cisco | 25 | 15 | 5 | 16 | NEWKEV 5Nuclei 16PoC 25 | rv345p firmware (15) · rv345 firmware (15) · rv340w firmware (15) | — | |
| 42 | cisco systems inc. | 25 | 15 | 5 | 16 | NEWKEV 5Nuclei 16PoC 25 | cisco rv345p (15) · cisco small business rv340 (15) · cisco rv340w (15) | — | |
| 43 | mediatek, inc. | 24 | · | · | · | NEW | mt8167, mt8175, mt8183, mt8362a, mt8365, mt8385 (10) · mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893, mt8185, mt8789, mt8791, mt8797 (2) · mt6735, mt6737, mt6739, mt6750, mt6750s, mt6753, mt6755, mt6755s, mt6757, mt6757c, mt6757cd, mt6757ch, mt6758, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6795, mt6797, mt6799, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6880, mt6883, mt6885, mt6889, mt6890, mt6891, mt6893, mt8167, mt8168, mt8173, mt8175, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 (1) | — | |
| 44 | adobe systems inc. | 22 | 2 | 1 | 1 | NEWKEV 1Nuclei 1PoC 1 | illustrator 2021 (15) · illustrator 2022 (15) · photoshop 2022 (2) | — | |
| 45 | oracle | 22 | 5 | · | 4 | NEWNuclei 4PoC 7 | zfs storage appliance kit (8) · communications cloud native core binding support function (6) · http server (6) | — | |
| 46 | tendacn | 22 | 9 | · | · | NEWPoC 5 | g1 firmware (21) · g3 firmware (21) · ac10u firmware (1) | — | |
| 47 | ibm | 21 | 1 | · | · | NEW | maximo anywhere (3) · aix (3) · sterling external authentication server (3) | — | |
| 48 | microweber | 21 | · | · | 8 | NEWNuclei 8PoC 11 | microweber (21) · microweber/microweber (21) | — | |
| 49 | foxit | 20 | 2 | · | · | NEW | pdf reader (20) · pdf editor (18) | — | |
| 50 | adobe | 18 | 1 | 1 | 1 | NEWKEV 1Nuclei 1 | illustrator (13) · creative cloud desktop application (1) · after effects (1) | — |