CVE Tools
Sign in
month report

August 2022

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

August 2022 closed with 2,435 published CVEs. 391 criticals, 23 added to CISA KEV (6 ransomware-linked). google led volume, mostly via android. Top weakness class — CWE-787 (282 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
2,435
— MoM— YoY
Severity mix
391 / 868
critical / high
KEV added
23
6 ransomware-linked
Nuclei coverage
8.0%
195 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
1292.2
n=195
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
24
n=6
Detection gap

KEV pressure, no Nuclei coverage

August 2022 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in August 2022

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

787Out-of-bounds Write79XSS89SQL Injection125Out-of-bounds Read862Missing Authorization416Use After Free20Improper Input Validation78OS Command Injection120Buffer Overflow22Path Traversalgoogle20194213121сообщество свободного программного обеспечения16431230441ооо «русбитех-астра»2011228431microsoft corp2172ао «нппкт»13272743fedoraproject19182172microsoft1121redhat422772sourcecodester2148debian141146831h3c643maven1135416

Most discussed CVEs — August 2022

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1google—
    221 CVE14 critCVSS 6.5
    NEWPoC 1
    android (196) · google chrome (23) · chrome (23)
  • 2сообщество свободного программного обеспечения—
    169 CVE5 critCVSS 6.8
    NEWKEV 1PoC 26
    debian gnu/linux (108) · linux (48) · vim (17)
  • 3ооо «русбитех-астра»—
    140 CVE4 critCVSS 6.9
    NEWKEV 1Nuclei 1PoC 17
    astra linux special edition (137) · astra linux special edition для «эльбрус» (27) · astra linux common edition (9)
  • 4redhat—
    130 CVE4 critCVSS 6.3
    NEWNuclei 1PoC 19
    red hat enterprise linux (59) · enterprise linux (49) · single sign-on (10)
  • 5microsoft—
    126 CVE3 critCVSS 7.5
    NEWKEV 1Nuclei 1PoC 1
    windows 10 (44) · windows 10 21h2 (43) · windows 10 20h2 (43)
  • 6ао "нппкт"—
    116 CVE3 critCVSS 7.0
    NEWNuclei 1PoC 18
    осон основа оnyx (116)
  • 7fedoraproject—
    113 CVE2 critCVSS 7.0
    NEWKEV 1Nuclei 1PoC 23
    fedora (113) · extra packages for enterprise linux (3)
  • 8unknown—
    103 CVE6 critCVSS 6.0
    NEWNuclei 103PoC 45
    transposh wordpress translation (6) · yaysmtp – simple wp smtp mail (3) · givewp – donation plugin and fundraising platform (2)
  • 9sourcecodester—
    87 CVECVSS 5.6
    NEWPoC 28
    gym management system (12) · company website cms (9) · simple e-learning system (6)
  • 10debian—
    69 CVE3 critCVSS 6.9
    NEWKEV 1Nuclei 1PoC 9
    debian linux (69) · schroot (1)
  • 11h3c—
    67 CVE33 critCVSS 8.8
    NEWPoC 33
    magic nx18 plus firmware (20) · gr-1200w firmware (18) · h200 firmware (16)
  • 12maven—
    64 CVE9 critCVSS 7.2
    NEWKEV 1Nuclei 4PoC 8
    org.dspace:dspace-jspui (5) · org.apache.jspwiki:jspwiki-main (5) · org.keycloak:keycloak-core (5)
  • 13ао «ивк»—
    64 CVE1 critCVSS 6.8
    NEWPoC 10
    альт 8 сп (58) · альт сп 10 (11)
  • 14ооо «ред софт»—
    60 CVE3 critCVSS 7.0
    NEWNuclei 1PoC 12
    ред ос (60)
  • 15intel—
    59 CVE4 critCVSS 5.9
    NEWPoC 1
    wi-fi 6 ax201 firmware (14) · wi-fi 6 ax200 firmware (14) · wireless-ac 9462 firmware (13)
  • 16npm—
    53 CVE14 critCVSS 7.1
    NEWPoC 11
    @openzeppelin/contracts (4) · @openzeppelin/contracts-upgradeable (4) · raneto (3)
  • 17tenda—
    52 CVE24 critCVSS 8.6
    NEWPoC 23
    ac1206 firmware (19) · m3 firmware (10) · ax1803 firmware (8)
  • 18linux—
    45 CVECVSS 6.3
    NEWPoC 5
    linux kernel (45)
  • 19novell inc.—
    45 CVE2 critCVSS 6.9
    NEWPoC 7
    opensuse leap (31) · suse linux enterprise server (16) · suse linux enterprise server for sap applications (14)
  • 20packagist—
    45 CVE4 critCVSS 6.3
    NEWNuclei 3PoC 10
    magento/community-edition (8) · forkcms/forkcms (4) · getkirby/cms (4)
  • 21tcl—
    42 CVE36 critCVSS 9.5
    NEWPoC 20
    linkhub mesh wifi (42) · linkhub mesh wifi ac1200 (42)
  • 22totolink—
    42 CVE3 critCVSS 7.9
    NEWPoC 16
    a7000r firmware (11) · n350rt firmware (10) · a3700r firmware (9)
  • 23otfcc project—
    38 CVECVSS 6.5
    NEWPoC 17
    otfcc (38)
  • 24samsung mobile—
    33 CVECVSS 5.1
    NEW
    samsung mobile devices (19) · charm by samsung (5) · galaxy wearable (1)
  • 25canonical—
    29 CVECVSS 6.4
    NEWPoC 6
    ubuntu (26) · ubuntu linux (3)
  • 26netapp—
    29 CVE1 critCVSS 7.4
    NEWPoC 6
    ontap select deploy administration utility (12) · h300s firmware (10) · h700s firmware (10)
  • 27ао «концерн вниинс»—
    28 CVECVSS 7.6
    NEW
    ос он «стрелец» (28)
  • 28adobe—
    27 CVECVSS 6.7
    NEW
    adobe commerce (8) · commerce (8) · magento commerce (8)
  • 29ао «нтц ит роса»—
    27 CVE1 critCVSS 7.2
    NEWPoC 4
    rosa virtualization (18) · rosa virtualization 3.0 (11) · роса хром (4)
  • 30apache—
    26 CVE3 critCVSS 7.7
    NEW
    traffic server (6) · jspwiki (5) · geode (3)
  • 31apache software foundation—
    26 CVE3 critCVSS 7.9
    NEW
    apache traffic server (6) · apache jspwiki (5) · apache avro (3)
  • 32dlink—
    26 CVE16 critCVSS 9.1
    NEWKEV 1Nuclei 1PoC 7
    dir-816 firmware (9) · go-rt-ac750 firmware (7) · dir-845l firmware (3)
  • 33library management system project—
    26 CVE20 critCVSS 9.1
    NEWPoC 9
    library management system (26)
  • 34pypi—
    26 CVE2 critCVSS 7.0
    NEWNuclei 1PoC 5
    ansible-runner (3) · octoprint (2) · asyncua (1)
  • 35mediatek, inc.—
    25 CVE1 critCVSS 6.6
    NEW
    mt7603, mt7610, mt7612, mt7613, mt7615, mt7620, mt7622, mt7628, mt7629, mt7915, mt7916, mt7986, mt8981 (8) · mt6833, mt6853, mt6873, mt6877, mt6879, mt6885, mt6893, mt6895, mt6983, mt8167, mt8167s, mt8168, mt8173, mt8175, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8532, mt8666, mt8675, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 (3) · mt6833, mt6853, mt6873, mt6877, mt6879, mt6885, mt6893, mt6895, mt6983, mt8185, mt8321, mt8385, mt8532, mt8666, mt8675, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 (3)
  • 36dell—
    23 CVECVSS 6.6
    NEW
    wyse management suite (10) · powerscale onefs (4) · emc powerscale onefs (4)
  • 37ibm—
    23 CVE4 critCVSS 6.5
    NEW
    cics tx standard (6) · cics tx (6) · cics tx advanced (6)
  • 38wwbn—
    22 CVE3 critCVSS 7.7
    NEWNuclei 9PoC 3
    avideo (22)
  • 39f5—
    21 CVECVSS 6.8
    NEWNuclei 1PoC 1
    big-ip access policy manager (18) · big-ip domain name system (16) · big-ip advanced firewall manager (15)
  • 40crates.io—
    19 CVECVSS 7.3
    NEWPoC 2
    apache-avro (3) · oqs (2) · opcua (2)
  • 41vim—
    19 CVECVSS 7.4
    NEWPoC 3
    vim (18) · vim/vim (18) · gvim (1)
  • 42vmware—
    18 CVE2 critCVSS 7.6
    NEWNuclei 4
    identity manager (10) · identity manager connector (10) · one access (10)
  • 43wavlink—
    17 CVE16 critCVSS 9.7
    NEWPoC 5
    wn533a8 firmware (16) · wn530h4 firmware (16) · wn531p3 firmware (16)
  • 44broadcom inc.—
    16 CVE2 critCVSS 7.7
    NEWNuclei 4
    vmware aria automation (10) · vmware aria suite lifecycle (10) · vmware cloud foundation (9)
  • 45gitlab—
    16 CVECVSS 5.0
    NEWNuclei 1
    gitlab (16)
  • 46samsung—
    16 CVECVSS 5.7
    NEWPoC 1
    charm firmware (3) · mtower (2) · charm (2)
  • 47фссп россии—
    16 CVE2 critCVSS 7.7
    NEWNuclei 1PoC 2
    ос тд аис фссп россии (16)
  • 48apple—
    15 CVE2 critCVSS 7.4
    NEWKEV 2PoC 1
    macos (14) · ipados (12) · iphone os (11)
  • 49cisco—
    15 CVE3 critCVSS 8.4
    NEWNuclei 1PoC 14
    cisco small business rv series router firmware (3) · cisco small business rv340 (3) · cisco rv345 (3)
  • 50fedora project—
    15 CVE2 critCVSS 7.2
    NEWPoC 3
    fedora (15)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-787282—
2CWE-79241—
3CWE-89181—
4CWE-12566—
5CWE-86265—
6CWE-41662—
7CWE-2059—
8CWE-7859—
9CWE-12058—
10CWE-2258—
11CWE-35253—
12CWE-20044—
13CWE-26941—
14CWE-47635—
15CWE-28434—
16CWE-28733—
17CWE-40031—
18CWE-77031—
19CWE-43430—
20CWE-11927—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Operating Systems493 CVE
    102 crit60 KEV42 vendorsCVSS 7.5
    astra linux special edition (137) · fedora (128) · осон основа оnyx (116)
  • Web & CMS Plugins406 CVE
    51 crit1 KEV180 vendorsCVSS 7.5
    company website cms (17) · gym management system (12) · online admission system (8)
  • OSS Libraries402 CVE
    52 crit1 KEV112 vendorsCVSS 7.7
    swftools (12) · libtiff (9) · imagemagick (8)
  • Enterprise Software364 CVE
    407 crit5 KEV93 vendorsCVSS 8.8
    pandora fms (18) · ontap select deploy administration utility (12) · h300s firmware (10)
  • Networking Infrastructure324 CVE
    410 crit1 KEV52 vendorsCVSS 8.9
    linkhub mesh wifi (42) · linkhub mesh wifi ac1200 (42) · magic nx18 plus firmware (20)
  • Mobile Apps263 CVE
    32 crit17 KEV6 vendorsCVSS 7.3
    android (201) · chrome (23) · google chrome (23)
  • ICS / OT / IoT144 CVE
    68 crit65 vendorsCVSS 8.8
    otfcc (38) · edgeaggregator (9) · edgeconnector (9)
  • Hardware Firmware143 CVE
    46 crit37 vendorsCVSS 9.0
    wi-fi 6 ax200 firmware (14) · wi-fi 6 ax201 firmware (14) · proset wi-fi 6e ax210 firmware (13)
  • Consumer Software112 CVE
    7 crit1 KEV37 vendorsCVSS 8.3
    vim (18) · vim/vim (18) · pdf editor (17)
  • Security Products80 CVE
    10 crit5 KEV43 vendorsCVSS 7.7
    big-ip access policy manager (18) · big-ip domain name system (16) · big-ip (15)
  • Cloud & SaaS76 CVE
    23 crit38 vendorsCVSS 7.6
    identity manager (10) · identity manager connector (10) · omnissa workspace one access (10)
  • DevTools & CI63 CVE
    4 crit25 vendorsCVSS 8.3
    gitlab (16) · sourcegraph (2) · enterprise server (1)
  • Communications37 CVE
    14 crit2 KEV22 vendorsCVSS 8.5
    security gateway for email servers (8) · zimbra collaboration suite (3) · exim (2)
  • Databases22 CVE
    20 vendorsCVSS 7.8
    postgresql (5) · mariadb (2) · postgres pro certified (2)
  • AI / ML4 CVE
    1 crit5 vendorsCVSS 8.9
    computer vision annotation tool (cvat) (1) · loopback-connector-postgresql (1)
  • Unclassified159 CVE
    39 crit88 vendorsCVSS 7.3
    ос тд аис фссп россии (16) · xpdf (11) · edoc-doctor-appointment-system (7)
Weakness × Sector

Which weaknesses hit which solution categories in August 2022

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

787Out-of-bounds Write79XSS89SQL Injection125Out-of-bounds Read862Missing Authorization416Use After Free20Improper Input Validation78OS Command Injection120Buffer Overflow22Path TraversalOperating Systems585327424227175OSS Libraries45471218214133814Web & CMS Plugins212810014195113Networking Infrastructure1458321037365Enterprise Software73972211413Hardware Firmware2431111610381Consumer Software1710213243274ICS / OT / IoT35531012318Cloud & SaaS37212415Security Products171211112