CVE Tools
Track your stack

June 2022

2,302 CVEs published, +4% on May 2022 and +16% on June 2021. CISA added 48 to KEV.

2022 month by month

2022, month by month. Point at another month to read it.
2022: CVEs published per month
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2022January 2022: 2,210 CVEs40 added to CISA KEVFebruary 2022: 2,053 CVEs32 added to CISA KEVMarch 2022: 2,136 CVEs226 added to CISA KEVApril 2022: 2,106 CVEs45 added to CISA KEVMay 2022: 2,205 CVEs83 added to CISA KEVJune 2022: 2,302 CVEs48 added to CISA KEVJuly 2022: 2,201 CVEs3 added to CISA KEVAugust 2022: 2,435 CVEs23 added to CISA KEVSeptember 2022: 2,210 CVEs24 added to CISA KEVOctober 2022: 1,936 CVEs12 added to CISA KEVNovember 2022: 2,135 CVEs10 added to CISA KEVDecember 2022: 2,862 CVEs9 added to CISA KEV26,791+18%
Critical
33115% of the 2,184 with a CVSS score
Added to CISA KEV
482 of this month's CVEs are in KEV, listed a median 276 days after publication
Vendors
1,0304,147 products
Top weakness
XSSCWE-79 · 336 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

  1. 1UnknownNote Press, HTML2WP, Five Minute Webshop1458nonenew
  2. 2GoogleAndroid, Kctf, Protobuf-c12113nonenew
  3. 3MavenOrg.jenkins-ci.main:jenkins-core, Org.jenkins-ci.plugins:ec2-deployment-dashboard, Com.geteasyqa:easyqa1127nonenew
  4. 4UnspecifiedFfmpeg, Hindu Matrimonial Script, Phplist990nonenew
  5. 5JenkinsJenkins, Deployment Dashboard, Jenkins Deployment Dashboard Plugin861nonenew
  6. 6Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux, Linux, Vim826nonenew
  7. 7Ооо «русбитех-астра»Astra Linux Special Edition, Astra Linux Special Edition Для «эльбрус», Astra Linux Common Edition693nonenew
  8. 8QualcommWSA8830 Firmware, WSA8835 Firmware, WCD9370 Firmware68101new
  9. 9Qualcomm, Inc.Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial Iot, Snapdragon Mobile, Snapdragon Connectivity, Snapdragon Mobile68101new
  10. 10Ао "нппкт"Осон Основа Оnyx682nonenew
  11. 11MicrosoftWindows Server 2019 (Server Core Installation), Windows Server 2019, Windows 106311new
  12. 12Crates.ioArrow, Rulex, Crossbeam611nonenew
  13. 13PackagistElefant/cms, Typo3/cms-core, Typo3/cms606nonenew
  14. 14npmParse-url, Nocodb, Parse-server558nonenew
  15. 15FedoraprojectFedora, Extra Packages For Enterprise Linux524nonenew
  16. 16Ооо «ред Софт»Ред Ос483nonenew
  17. 17AdobeAdobe Bridge, Bridge, Indesign470nonenew
  18. 18DebianDebian Linux451nonenew
  19. 19Red HatRed Hat Enterprise Linux, Jboss Core Services, Red Hat Software Collections446nonenew
  20. 20IBMJazz Team Server, Spectrum Copy Data Management, Robotic Process Automation438nonenew
  21. 21Samsung MobileSamsung Mobile Devices, Samsung Account, Smart Things410nonenew
  22. 22Fedora ProjectFedora, 389 Directory Server403nonenew
  23. 23PyPIInventree, Oauthenticator, Perdido3716nonenew
  24. 24Ао «ивк»Альт 8 Сп, Альт Сп 10372nonenew
  25. 25SiemensSinema Remote Connect Server, Sicam Gridedge (Classic), Sicam Gridedge Essential303nonenew

Severity

How this month's CVEs score on CVSS; 118 have no score yet. Severity is not exploitation.

  • Critical33115%
  • High81537%
  • Medium94443%
  • Low944%

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. Unknown145#1
  2. Google121#2
  3. Maven112#3
  4. Unspecified99#4
  5. Jenkins86#5
  6. Сообщество Свободного Программного Обеспечения82#6
  7. Ооо «русбитех-астра»69#7
  8. Qualcomm68#8
  9. Qualcomm, Inc.68#9
  10. Ао "нппкт"68#10

What kind of weakness

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

  1. CWE-79XSS336new
  2. CWE-89SQL Injection268new
  3. CWE-787Out-of-bounds Write137new
  4. CWE-352CSRF110new
  5. CWE-269Improper Privilege Mgmt63new
  6. CWE-125Out-of-bounds Read61new
  7. CWE-20Improper Input Validation60new
  8. CWE-200Information Exposure60new
  9. CWE-78OS Command Injection55new
  10. CWE-862Missing Authorization49new
  11. CWE-22Path Traversal47new
  12. CWE-8043new
  13. CWE-522Insufficiently Protected Credentials37new
  14. CWE-416Use After Free34new
  15. CWE-287Improper Authentication33new
  16. CWE-434Unrestricted File Upload28new
  17. CWE-119Memory Buffer Bounds27new
  18. CWE-918SSRF25new
  19. CWE-306Missing Auth for Critical Function23new
  20. CWE-863Incorrect Authorization23new

Where it landed

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

Which weakness, where

The top weakness classes against the vendors and the sectors that carried them.

CVEs published in June 2022

11 vulnerabilities from this month that were exploited in the wild (CISA KEV), covered in the news, explained on cve.tools or searched for. Known-exploited first, then by CVSS.

Snapshot v1, computed Jun 11, 2026, 06:05 UTC. MethodologyAll months on record

Nuclei coverage and the detection gap are held back while the template mirror is repaired.