CVE tracker
Scroll across the table to compare exploitation and severity.
| CVE / vulnerability | Exploitation | CVSS |
|---|---|---|
| CVE-2022-22718Windows Print Spooler Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows 10 Version 1909, Microsoft Windows 10 Version 21H1, Microsoft Windows Server 2022, Microsoft Windows 10 Version 20H2, Microsoft Windows Server version 20H2, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows 7, Microsoft Windows 7 Service Pack 1, Microsoft Windows 8.1, Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2022-22706Arm Mali GPU Kernel Driver Unspecified Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2022-22675Apple macOS Out-of-Bounds Write Vulnerability Apple iOS and iPadOS, Apple macOS, Apple watchOS Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2022-22674Apple macOS Out-of-Bounds Read Vulnerability Apple macOS Versions & vendor guidance → |
Known exploitedCISA KEV | 5.5Medium |
| CVE-2022-22620Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability Apple Safari (v and ), Apple macOS Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2022-22587Apple Memory Corruption Vulnerability Apple iOS and iPadOS, Apple macOS Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2022-22536SAP Multiple Products HTTP Request Smuggling Vulnerability SAP SE SAP NetWeaver and ABAP Platform, SAP SE SAP Web Dispatcher, SAP SE SAP Content Server Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2022-22265Samsung Mobile Devices Use-After-Free Vulnerability Samsung Mobile Samsung Mobile Devices Versions & vendor guidance → |
Known exploitedCISA KEV | 5Medium |
| CVE-2022-22071Qualcomm Multiple Chipsets Use-After-Free Vulnerability Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music Versions & vendor guidance → |
Known exploitedCISA KEV | 8.4High |
| CVE-2022-22047Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows 10 Version 21H1, Microsoft Windows Server 2022, Microsoft Windows 10 Version 20H2, Microsoft Windows Server version 20H2, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows 7, Microsoft Windows 7 Service Pack 1, Microsoft Windows 8.1, Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2022-21999Windows Print Spooler Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows 10 Version 1909, Microsoft Windows 10 Version 21H1, Microsoft Windows Server 2022, Microsoft Windows 10 Version 20H2, Microsoft Windows Server version 20H2, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows 7, Microsoft Windows 7 Service Pack 1, Microsoft Windows 8.1, Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2022-21971Windows Runtime Remote Code Execution Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows 10 Version 1909, Microsoft Windows 10 Version 21H1, Microsoft Windows Server 2022, Microsoft Windows 10 Version 20H2, Microsoft Windows Server version 20H2, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2 Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2022-21919Windows User Profile Service Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows 10 Version 1909, Microsoft Windows 10 Version 21H1, Microsoft Windows Server 2022, Microsoft Windows 10 Version 20H2, Microsoft Windows Server version 20H2, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows 7, Microsoft Windows 7 Service Pack 1, Microsoft Windows 8.1, Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7High |
| CVE-2022-21882Win32k Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows 10 Version 1909, Microsoft Windows 10 Version 21H1, Microsoft Windows Server 2022, Microsoft Windows 10 Version 20H2, Microsoft Windows Server version 20H2, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2 Versions & vendor guidance → |
Known exploitedCISA KEV | 7High |
| CVE-2022-21587Oracle E-Business Suite Unspecified Vulnerability Oracle Corporation Web Applications Desktop Integrator Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2022-21445Oracle ADF Faces Deserialization of Untrusted Data Vulnerability Oracle Corporation Application Development Framework (ADF) Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2022-20821Cisco IOS XR Software Health Check Open Port Vulnerability Cisco Cisco IOS XR Software Versions & vendor guidance → |
Known exploitedCISA KEV | 6.5Medium |
| CVE-2022-20775Cisco SD-WAN Software Privilege Escalation Vulnerability Cisco Cisco Catalyst SD-WAN, Cisco Cisco Catalyst SD-WAN Manager, Cisco Cisco SD-WAN vContainer, Cisco Cisco SD-WAN vEdge Cloud, Cisco Cisco SD-WAN vEdge Router Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2022-20708Cisco Small Business RV Series Routers Vulnerabilities Cisco Cisco Small Business RV Series Router Firmware Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2022-20703Cisco Small Business RV Series Routers Vulnerabilities Cisco Cisco Small Business RV Series Router Firmware Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2022-20701Cisco Small Business RV Series Routers Vulnerabilities Cisco Cisco Small Business RV Series Router Firmware Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2022-20700Cisco Small Business RV Series Routers Vulnerabilities Cisco Cisco Small Business RV Series Router Firmware Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2022-20699Cisco Small Business RV Series Routers Vulnerabilities Cisco Cisco Small Business RV Series Router Firmware Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2022-1388F5 BIG-IP Missing Authentication Vulnerability F5 BIG-IP Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2022-1364Google Chromium V8 Type Confusion Vulnerability Google Chrome Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
Data sources, freshness & score definitions
The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.
CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records
CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable
FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records
CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.