Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2022-41091 Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability CRITICAL N/A 1.81% cvelistv5 2022-11-08
cve-2022-41082 Microsoft Exchange Server Remote Code Execution Vulnerability HIGH 8.0 99.97% cvelistv5 2022-09-30
cve-2022-41080 Microsoft Exchange Server Privilege Escalation Vulnerability HIGH 8.8 77.33% cvelistv5 2023-01-10
cve-2022-41073 Microsoft Windows Print Spooler Privilege Escalation Vulnerability CRITICAL N/A 2.28% cvelistv5 2022-11-08
cve-2022-41049 Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability HIGH N/A 2.49% cvelistv5 2022-11-14
cve-2022-41040 Microsoft Exchange Server Server-Side Request Forgery Vulnerability HIGH 8.8 99.96% cvelistv5 2022-09-30
cve-2022-41033 Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability HIGH N/A 1.70% cvelistv5 2022-10-11
cve-2022-40881 SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php CRITICAL 9.8 30.11% cvelistv5 2026-06-17
cve-2022-40843 CVE-2022-40843 HIGH N/A 28.80% cvelistv5
cve-2022-40799 D-Link DNR-322L Download of Code Without Integrity Check Vulnerability HIGH N/A 33.65% cvelistv5 2025-08-05
cve-2022-40765 Mitel MiVoice Connect Command Injection Vulnerability CRITICAL N/A 10.57% cvelistv5 2023-02-21
cve-2022-40734 UniSharp laravel-filemanager (aka Laravel Filemanager) before 2.6.4 allows download?working_dir=%2F.. directory traversal to read arbitrary files, as exploited in the wild in June 2022. This is related to league/flysystem before 2.0.0. MEDIUM 6.5 5.18% cvelistv5 2026-06-17
cve-2022-40684 Fortinet Multiple Products Authentication Bypass Vulnerability CRITICAL 9.8 99.98% cvelistv5 2022-10-11
cve-2022-4063 CVE-2022-4063 CRITICAL 9.8 9.52% cvelistv5
cve-2022-40619 FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, exposes an HTTP server over the LAN interface of affected devices. This interface is vulnerable to unauthenticated arbitrary command injection through the funjsq_access_token parameter. This affects R6230 before 1.1.0.112, R6260 before 1.1.0.88, R7000 before 1.0.11.134, R8900 before 1.0.5.42, R9000 before 1.0.5.42, and XR300 before 1.0.3.72 and Orbi RBR20 before 2.7.2.26, RBR50 before 2.7.4.26, RBS20 before 2.7.2.26, and RBS50 before 2.7.4.26. HIGH 7.7 2.54% cvelistv5 2026-06-17
cve-2022-4059 CVE-2022-4059 CRITICAL 9.8 4.79% cvelistv5
cve-2022-4050 CVE-2022-4050 CRITICAL 9.8 4.76% cvelistv5
cve-2022-40139 Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability HIGH N/A 3.29% cvelistv5 2022-09-15
cve-2022-40022 CVE-2022-40022 CRITICAL 9.8 92.47% cvelistv5
cve-2022-39986 CVE-2022-39986 HIGH N/A 99.03% cvelistv5
cve-2022-39960 CVE-2022-39960 HIGH N/A 25.68% cvelistv5
cve-2022-39952 A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP request. CRITICAL 9.8 99.79% cvelistv5 2026-06-17
cve-2022-3982 Booking Calendar < 3.2.2 - Unauthenticated Arbitrary File Upload CRITICAL 9.8 4.54% cvelistv5 2026-06-17
cve-2022-3980 An XML External Entity (XEE) vulnerability allows server-side request forgery (SSRF) and potential code execution in Sophos Mobile managed on-premises between versions 5.0.0 and 9.7.4. CRITICAL 9.8 8.91% cvelistv5 2026-06-17
cve-2022-39197 Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability MEDIUM 6.1 46.45% cvelistv5 2023-03-30
cve-2022-38840 CVE-2022-38840 HIGH 7.5 9.80% cvelistv5
cve-2022-38627 CVE-2022-38627 CRITICAL 9.8 4.30% cvelistv5
cve-2022-38296 CVE-2022-38296 HIGH N/A 5.14% cvelistv5
cve-2022-38181 Arm Mali GPU Kernel Driver Use-After-Free Vulnerability HIGH 8.8 13.56% cvelistv5 2023-03-30
cve-2022-38130 CVE-2022-38130 HIGH N/A 54.07% cvelistv5