CVE tracker
Scroll across the table to compare exploitation and severity.
| CVE / vulnerability | Exploitation | CVSS |
|---|---|---|
| CVE-2022-28810Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 6.8Medium |
| CVE-2022-2856Google Chromium Intents Insufficient Input Validation Vulnerability Google Chrome Versions & vendor guidance → |
Known exploitedCISA KEV | 6.5Medium |
| CVE-2022-27926Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 6.1Medium |
| CVE-2022-27925Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 7.2High |
| CVE-2022-27924Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2022-27593DeadBolt Ransomware QNAP Systems Inc. Photo Station Reported fix guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2022-27518Unauthenticated remote arbitrary code execution Citrix Citrix Gateway, Citrix ADC Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2022-26925Windows LSA Spoofing Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows 10 Version 1909, Microsoft Windows 10 Version 21H1, Microsoft Windows Server 2022, Microsoft Windows 10 Version 20H2, Microsoft Windows Server version 20H2, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows 7, Microsoft Windows 7 Service Pack 1, Microsoft Windows 8.1, Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 8.1High |
| CVE-2022-26923Active Directory Domain Services Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows 10 Version 1909, Microsoft Windows 10 Version 21H1, Microsoft Windows Server 2022, Microsoft Windows 10 Version 20H2, Microsoft Windows Server version 20H2, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows 8.1, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2022-26904Windows User Profile Service Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows 10 Version 1909, Microsoft Windows 10 Version 21H1, Microsoft Windows Server 2022, Microsoft Windows 10 Version 20H2, Microsoft Windows Server version 20H2, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows 7, Microsoft Windows 7 Service Pack 1, Microsoft Windows 8.1, Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7High |
| CVE-2022-26871Trend Micro Apex Central Arbitrary File Upload Vulnerability Trend Micro Trend Micro Apex Central Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2022-26501Veeam Backup & Replication Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2022-26500Veeam Backup & Replication Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2022-26486Mozilla Firefox Use-After-Free Vulnerability Mozilla Firefox, Mozilla Firefox ESR, Mozilla Firefox for Android, Mozilla Thunderbird, Mozilla Focus Versions & vendor guidance → |
Known exploitedCISA KEV | 9.6Critical |
| CVE-2022-26485Mozilla Firefox Use-After-Free Vulnerability Mozilla Firefox, Mozilla Firefox ESR, Mozilla Firefox for Android, Mozilla Thunderbird, Mozilla Focus Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2022-26352dotCMS Unrestricted Upload of File Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2022-26318WatchGuard Firebox and XTM Appliances Arbitrary Code Execution n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2022-26258D-Link DIR-820L Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2022-26143MiCollab, MiVoice Business Express Access Control Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2022-26138Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability Atlassian Questions For Confluence Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2022-26134Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability Atlassian Confluence Data Center, Atlassian Confluence Server Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2022-2586Linux Kernel Use-After-Free Vulnerability The Linux Kernel Organization linux Versions & vendor guidance → |
Known exploitedCISA KEV | 5.3Medium |
| CVE-2022-24990TerraMaster OS Remote Command Execution Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2022-24816Improper Control of Generation of Code in jai-ext geosolutions-it jai-ext Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2022-24706Remote Code Execution Vulnerability in Packaging Apache Software Foundation Apache CouchDB Reported workaround → |
Known exploitedCISA KEV | 9.8Critical |
Data sources, freshness & score definitions
The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.
CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records
CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable
FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records
CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.