CVE Tools
Sign in
month report

July 2022

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

July 2022 closed with 2,201 published CVEs. 289 criticals, 3 added to CISA KEV. google led volume, mostly via chrome. Top weakness class — CWE-79 (230 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
2,201
— MoM— YoY
Severity mix
289 / 755
critical / high
KEV added
3
0 ransomware-linked
Nuclei coverage
8.5%
186 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
1327.5
n=186
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
34
n=6
Detection gap

KEV pressure, no Nuclei coverage

July 2022 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in July 2022

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS787Out-of-bounds Write22Path Traversal416Use After Free89SQL Injection125Out-of-bounds Read78OS Command Injection120Buffer Overflow352CSRF20Improper Input Validationgoogle22536867ао «нппкт»5231711413сообщество свободного программного обеспечения622611624microsoft corp2813922ооо «русбитех-астра»320431511ао «концерн вниинс»21316522google inc31116622oracle13fedoraproject49113512oracle corp.1oracle corporation1microsoft21

Most discussed CVEs — July 2022

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1google—
    199 CVE10 critCVSS 7.6
    KEV 3PoC 25
    chrome (124) · google chrome (123) · android (73)
  • 2ао "нппкт"—
    191 CVE8 critCVSS 7.6
    KEV 3Nuclei 1PoC 40
    осон основа оnyx (191)
  • 3сообщество свободного программного обеспечения—
    175 CVE10 critCVSS 7.5
    KEV 2Nuclei 5PoC 40
    debian gnu/linux (151) · linux (24) · vim (12)
  • 4microsoft—
    163 CVE3 critCVSS 7.1
    KEV 2PoC 16
    microsoft edge (80) · windows server 2016 (44) · windows server version 20h2 (44)
  • 5ооо «русбитех-астра»—
    138 CVE7 critCVSS 7.5
    KEV 3Nuclei 1PoC 34
    astra linux special edition (137) · astra linux special edition для «эльбрус» (16) · astra linux common edition (3)
  • 6ао «концерн вниинс»—
    127 CVE6 critCVSS 7.9
    KEV 3PoC 24
    ос он «стрелец» (127)
  • 7oracle—
    96 CVE3 critCVSS 6.0
    Nuclei 5PoC 2
    mysql server (22) · database (13) · security service (9)
  • 8fedoraproject—
    91 CVE5 critCVSS 7.1
    KEV 1Nuclei 2PoC 19
    fedora (91) · extra packages for enterprise linux (5)
  • 9maven—
    75 CVE8 critCVSS 6.6
    KEV 1Nuclei 5PoC 8
    io.dataease:dataease-plugin-common (4) · org.jenkins-ci.plugins:openshift-deployer (4) · org.jenkins-ci.plugins:git (3)
  • 10debian—
    68 CVE4 critCVSS 7.1
    PoC 18
    debian linux (68)
  • 11ibm—
    65 CVE3 critCVSS 6.3
    engineering lifecycle optimization - publishing (6) · sterling partner engagement manager on cloud (6) · sterling partner engagement manager (6)
  • 12unknown—
    65 CVE2 critCVSS 5.8
    Nuclei 65PoC 34
    request a quote (2) · awin data feed (2) · ninja forms contact form – the drag and drop form builder for wordpress (2)
  • 13ао «ивк»—
    62 CVE2 critCVSS 6.4
    PoC 16
    альт 8 сп (59) · альт сп 10 (6)
  • 14ооо «ред софт»—
    62 CVE2 critCVSS 6.7
    Nuclei 3PoC 13
    ред ос (53) · ред база данных (9)
  • 15cisco—
    55 CVE5 critCVSS 5.1
    PoC 55
    cisco small business rv series router firmware (35) · rv130 firmware (35) · rv130w wireless-n multifunction vpn router (35)
  • 16siemens—
    51 CVE3 critCVSS 8.1
    Nuclei 1PoC 1
    pads viewer (20) · pads standard/plus viewer (20) · sinec ins (5)
  • 17netapp—
    49 CVE3 critCVSS 5.9
    PoC 7
    active iq unified manager (31) · oncommand insight (27) · snapcenter (26)
  • 18npm—
    49 CVE9 critCVSS 7.2
    Nuclei 1PoC 21
    undici (3) · llhttp (2) · @openzeppelin/contracts (2)
  • 19jenkins—
    44 CVECVSS 5.8
    Nuclei 1
    jenkins openshift deployer plugin (4) · openshift deployer (4) · jenkins coverity plugin (3)
  • 20cd foundation—
    42 CVECVSS 5.8
    NEWNuclei 1
    jenkins deployer framework plugin (4) · jenkins coverity plugin (3) · jenkins openshift deployer plugin (3)
  • 21samsung mobile—
    38 CVECVSS 4.8
    NEW
    samsung mobile devices (29) · galaxy store (3) · findmymobile (1)
  • 22redhat—
    36 CVE3 critCVSS 6.3
    Nuclei 3PoC 7
    red hat enterprise linux (22) · enterprise linux (7) · openshift container platform (4)
  • 23packagist—
    35 CVE2 critCVSS 6.4
    Nuclei 6PoC 11
    microweber/microweber (6) · moodle/moodle (5) · idno/known (4)
  • 24ао «нтц ит роса»—
    35 CVECVSS 6.8
    Nuclei 1PoC 8
    роса хром (24) · rosa virtualization (7) · роса кобальт (4)
  • 25adobe—
    34 CVECVSS 7.1
    acrobat (21) · acrobat dc (21) · acrobat reader (21)
  • 26pypi—
    34 CVE12 critCVSS 7.9
    KEV 1Nuclei 2PoC 9
    pypi (2) · ujson (2) · untangle (2)
  • 27mediatek, inc.—
    27 CVE2 critCVSS 7.0
    NEW
    mt6761, mt6779, mt6781, mt6833, mt6853, mt6873, mt6877, mt6879, mt6883, mt6885, mt6889, mt6893, mt6895, mt6983, mt8167s, mt8168, mt8175, mt8183, mt8185, mt8362a, mt8365, mt8385, mt8667, mt8675, mt8696, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 (6) · mt6580, mt6735, mt6737, mt6739, mt6753, mt6761, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6873, mt6877, mt6879, mt6883, mt6885, mt6889, mt6893, mt6895, mt6983, mt8321, mt8666, mt8667, mt8675, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 (3) · mt2731, mt2735, mt6297, mt6725, mt6735, mt6737, mt6739, mt6750, mt6750s, mt6755, mt6757, mt6757p, mt6758, mt6761, mt6762, mt6762d, mt6762m, mt6763, mt6765, mt6765t, mt6767, mt6768, mt6769, mt6769t, mt6769z, mt6771, mt6775, mt6779, mt6781, mt6783, mt6785, mt6785t, mt6789, mt6797, mt6799, mt6833, mt6853, mt6855, mt6873, mt6875, mt6877, mt6879, mt6880, mt6883, mt6885, mt6889, mt6890, mt6891, mt6893, mt6895, mt6983, mt8666, mt8667, mt8675, mt8735a, mt8735b, mt8765, mt8766, mt8768, mt8771, mt8781, mt8786, mt8788, mt8789, mt8791, mt8797 (2)
  • 28novell inc.—
    27 CVE2 critCVSS 7.4
    PoC 8
    opensuse leap (20) · suse linux enterprise server (11) · suse linux enterprise server for sap applications (10)
  • 29veritas—
    26 CVE7 critCVSS 7.6
    NEW
    netbackup (26) · netbackup appliance (17) · flex appliance (17)
  • 30go—
    25 CVE2 critCVSS 6.9
    Nuclei 1PoC 4
    github.com/kubeedge/kubeedge (6) · github.com/argoproj/argo-cd (3) · github.com/grafana/grafana (2)
  • 31fedora project—
    23 CVE2 critCVSS 7.1
    Nuclei 2PoC 5
    fedora (23)
  • 32linux—
    21 CVECVSS 6.6
    PoC 3
    linux kernel (21) · linux (6)
  • 33sap—
    21 CVECVSS 6.5
    Nuclei 1
    sap business objects business intelligence platform (5) · netweaver enterprise portal (5) · business one (3)
  • 34sap se—
    20 CVECVSS 6.4
    Nuclei 1
    sap netweaver enterprise portal (4) · sap business one (3) · sap s/4hana (2)
  • 35cybozu—
    19 CVECVSS 5.2
    NEW
    garoon (19)
  • 36cybozu, inc.—
    19 CVECVSS 5.2
    NEW
    cybozu garoon (19)
  • 37foxitsoftware—
    18 CVECVSS 6.9
    pdf editor (18) · pdf reader (18)
  • 38gitlab—
    18 CVE1 critCVSS 5.4
    Nuclei 2PoC 1
    gitlab (18)
  • 39dell—
    17 CVE1 critCVSS 6.4
    bsafe crypto-c-micro-edition (10) · bsafe micro-edition-suite (10) · dell bsafe crypto-c micro edition (8)
  • 40pexip—
    17 CVECVSS 7.4
    pexip infinity (17)
  • 41sourcecodester—
    17 CVECVSS 5.3
    NEWNuclei 1PoC 9
    garage management system (5) · simple e-learning system (3) · library management system (2)
  • 42wavlink—
    17 CVE3 critCVSS 7.6
    NEWNuclei 10PoC 9
    wifi-repeater firmware (5) · wl-wn535k3 firmware (3) · wn535k3 (3)
  • 43tenda—
    16 CVE5 critCVSS 8.2
    NEWPoC 7
    m3 firmware (8) · ax1806 firmware (5) · ax1803 firmware (2)
  • 44canonical—
    15 CVECVSS 6.9
    PoC 3
    ubuntu (14) · ubuntu linux (1)
  • 45fortinet—
    15 CVECVSS 6.4
    fortios (3) · fortiproxy (2) · fortianalyzer (2)
  • 46juniper—
    15 CVECVSS 6.6
    NEWPoC 13
    junos (14) · junos os evolved (4)
  • 47juniper networks—
    15 CVECVSS 6.6
    NEWPoC 13
    junos (14) · junos os (14) · junos os evolved (4)
  • 48tortall—
    15 CVECVSS 5.5
    NEWPoC 4
    yasm (15)
  • 49h3c—
    14 CVE13 critCVSS 9.5
    NEWNuclei 1PoC 5
    magic r200 firmware (12) · ssl vpn (1) · magic r100 firmware (1)
  • 50huawei—
    14 CVE1 critCVSS 7.4
    emui (13) · harmonyos (11) · magic ui (11)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79230·
2CWE-787138↑1
3CWE-22127↑8
4CWE-416111↑10
5CWE-8981↓3
6CWE-12562·
7CWE-7853↑2
8CWE-12050↑13
9CWE-35246↓5
10CWE-2040↓3
11CWE-47636↑11
12CWE-43433↑4
13CWE-86232↓3
14CWE-20031↓6
15CWE-79828↑14
16CWE-28727↓1
17CWE-86323↑3
18CWE-50222↑31
19CWE-30621·
20CWE-66821↑8

Sectors

Solution categories ranked by distinct CVE count this period.

  • Operating Systems532 CVE
    81 crit77 KEV37 vendorsCVSS 8.2
    осон основа оnyx (191) · debian gnu/linux (151) · astra linux special edition (137)
  • OSS Libraries374 CVE
    61 crit2 KEV108 vendorsCVSS 7.8
    yasm (15) · gstreamer (14) · mjs (13)
  • Enterprise Software350 CVE
    169 crit9 KEV78 vendorsCVSS 8.2
    active iq unified manager (31) · oncommand insight (27) · snapcenter (26)
  • Mobile Apps239 CVE
    29 crit12 KEV8 vendorsCVSS 7.8
    chrome (124) · google chrome (123) · android (75)
  • Web & CMS Plugins234 CVE
    37 crit6 KEV141 vendorsCVSS 8.0
    moodle (10) · microweber (8) · microweber/microweber (6)
  • Networking Infrastructure206 CVE
    59 crit46 vendorsCVSS 8.2
    cisco small business rv series router firmware (35) · rv110w firmware (35) · rv130 firmware (35)
  • ICS / OT / IoT132 CVE
    125 crit57 vendorsCVSS 8.8
    genesis64 (14) · iconics suite (14) · ignition (14)
  • Databases118 CVE
    9 crit11 vendorsCVSS 7.5
    mysql server (62) · mariadb (20) · communications billing and revenue management (14)
  • DevTools & CI105 CVE
    7 crit32 vendorsCVSS 6.9
    jenkins deployer framework plugin (7) · jenkins openshift deployer plugin (7) · jenkins coverity plugin (6)
  • Cloud & SaaS99 CVE
    21 crit33 vendorsCVSS 9.4
    netbackup (26) · flex appliance (17) · flex scale (17)
  • Consumer Software98 CVE
    2 crit1 KEV24 vendorsCVSS 8.8
    acrobat (21) · acrobat dc (21) · acrobat reader (21)
  • Hardware Firmware84 CVE
    131 crit27 vendorsCVSS 9.3
    nvidia dgx a100 (12) · cva6 (8) · dgx a100 firmware (6)
  • Security Products78 CVE
    8 crit45 vendorsCVSS 7.8
    fortios (3) · fortianalyzer (2) · forticlient (2)
  • Communications44 CVE
    3 crit1 KEV18 vendorsCVSS 8.2
    pexip infinity (17) · live555 (1)
  • AI / ML13 CVE
    5 crit6 vendorsCVSS 9.3
    kubeedge (6) · flyteadmin (2) · anakin (1)
  • Unclassified136 CVE
    47 crit104 vendorsCVSS 7.6
    megapix firmware (6) · ос тд аис фссп россии (6) · barangay management system (5)
Weakness × Sector

Which weaknesses hit which solution categories in July 2022

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS787Out-of-bounds Write22Path Traversal416Use After Free89SQL Injection125Out-of-bounds Read78OS Command Injection120Buffer Overflow352CSRF20Improper Input ValidationOperating Systems13537772162412OSS Libraries3926401161122126Enterprise Software50282872410Web & CMS Plugins104114381216Consumer Software91989423337Networking Infrastructure9426112313716ICS / OT / IoT31665149414Hardware Firmware6254212311Cloud & SaaS812211111Security Products133632133