CVE tracker
Scroll across the table to compare exploitation and severity.
| CVE / vulnerability | Exploitation | CVSS |
|---|---|---|
| CVE-2022-22047Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows 10 Version 21H1, Microsoft Windows Server 2022, Microsoft Windows 10 Version 20H2, Microsoft Windows Server version 20H2, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows 7, Microsoft Windows 7 Service Pack 1, Microsoft Windows 8.1, Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2022-21999Windows Print Spooler Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows 10 Version 1909, Microsoft Windows 10 Version 21H1, Microsoft Windows Server 2022, Microsoft Windows 10 Version 20H2, Microsoft Windows Server version 20H2, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows 7, Microsoft Windows 7 Service Pack 1, Microsoft Windows 8.1, Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2022-21971Windows Runtime Remote Code Execution Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows 10 Version 1909, Microsoft Windows 10 Version 21H1, Microsoft Windows Server 2022, Microsoft Windows 10 Version 20H2, Microsoft Windows Server version 20H2, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2 Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2022-21919Windows User Profile Service Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows 10 Version 1909, Microsoft Windows 10 Version 21H1, Microsoft Windows Server 2022, Microsoft Windows 10 Version 20H2, Microsoft Windows Server version 20H2, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows 7, Microsoft Windows 7 Service Pack 1, Microsoft Windows 8.1, Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7High |
| CVE-2022-21882Win32k Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows 10 Version 1909, Microsoft Windows 10 Version 21H1, Microsoft Windows Server 2022, Microsoft Windows 10 Version 20H2, Microsoft Windows Server version 20H2, Microsoft Windows 11 version 21H2, Microsoft Windows 10 Version 21H2 Versions & vendor guidance → |
Known exploitedCISA KEV | 7High |
| CVE-2022-21587Oracle E-Business Suite Unspecified Vulnerability Oracle Corporation Web Applications Desktop Integrator Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2022-21445Oracle ADF Faces Deserialization of Untrusted Data Vulnerability Oracle Corporation Application Development Framework (ADF) Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2022-20821Cisco IOS XR Software Health Check Open Port Vulnerability Cisco Cisco IOS XR Software Versions & vendor guidance → |
Known exploitedCISA KEV | 6.5Medium |
| CVE-2022-20775Cisco SD-WAN Software Privilege Escalation Vulnerability Cisco Cisco Catalyst SD-WAN, Cisco Cisco Catalyst SD-WAN Manager, Cisco Cisco SD-WAN vContainer, Cisco Cisco SD-WAN vEdge Cloud, Cisco Cisco SD-WAN vEdge Router Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2022-20708Cisco Small Business RV Series Routers Vulnerabilities Cisco Cisco Small Business RV Series Router Firmware Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2022-20703Cisco Small Business RV Series Routers Vulnerabilities Cisco Cisco Small Business RV Series Router Firmware Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2022-20701Cisco Small Business RV Series Routers Vulnerabilities Cisco Cisco Small Business RV Series Router Firmware Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2022-20700Cisco Small Business RV Series Routers Vulnerabilities Cisco Cisco Small Business RV Series Router Firmware Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2022-20699Cisco Small Business RV Series Routers Vulnerabilities Cisco Cisco Small Business RV Series Router Firmware Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2022-1388F5 BIG-IP Missing Authentication Vulnerability F5 BIG-IP Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2022-1364Google Chromium V8 Type Confusion Vulnerability Google Chrome Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2022-1096Google Chromium V8 Type Confusion Vulnerability Google Chrome Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2022-1040Sophos Firewall Authentication Bypass Vulnerability Sophos Sophos Firewall Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2022-0995Linux Kernel Out-of-Bounds Write Vulnerability n/a kernel Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2022-0847Linux Kernel Privilege Escalation Vulnerability n/a kernel Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2022-0609Google Chromium Animation Use-After-Free Vulnerability Google Chrome Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2022-0543Debian-specific Redis Server Lua Sandbox Escape Vulnerability Debian redis Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2022-0492Linux Kernel Improper Authentication Vulnerability n/a kernel Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2022-0185Linux Kernel Heap-Based Buffer Overflow Vulnerability n/a kernel Versions & vendor guidance → |
Known exploitedCISA KEV | 8.4High |
| CVE-2022-0028PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering Palo Alto Networks Cloud NGFW, Palo Alto Networks PAN-OS, Palo Alto Networks Prisma Access Reported fix guidance → |
Known exploitedCISA KEV | 8.6High |
Data sources, freshness & score definitions
The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.
CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records
CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable
FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records
CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.