Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2022-45933 | CVE-2022-45933 | CRITICAL | 9.8 | 51.70% | cvelistv5 | |
| cve-2022-45835 | CVE-2022-45835 | MEDIUM | 5.8 | 37.67% | cvelistv5 | |
| cve-2022-45359 | CVE-2022-45359 | CRITICAL | 9.8 | 13.51% | cvelistv5 | |
| cve-2022-44877 | CWP Control Web Panel OS Command Injection Vulnerability | CRITICAL | 9.8 | 100.00% | cvelistv5 | 2023-01-17 |
| cve-2022-44698 | Microsoft Defender SmartScreen Security Feature Bypass Vulnerability | MEDIUM | 5.4 | 76.27% | cvelistv5 | 2022-12-13 |
| cve-2022-4447 | CVE-2022-4447 | CRITICAL | 9.8 | 4.76% | cvelistv5 | |
| cve-2022-44149 | CVE-2022-44149 | HIGH | 8.8 | 64.35% | cvelistv5 | |
| cve-2022-43939 | Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability | HIGH | 8.6 | 92.27% | cvelistv5 | 2025-03-03 |
| cve-2022-4328 | CVE-2022-4328 | CRITICAL | 9.8 | 4.43% | cvelistv5 | |
| cve-2022-42953 | CVE-2022-42953 | HIGH | 7.5 | 4.83% | cvelistv5 | |
| cve-2022-42948 | Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability | CRITICAL | 9.8 | 2.71% | cvelistv5 | 2023-03-30 |
| cve-2022-42889 | SUSE CVE CVE-2022-42889 | CRITICAL | 9.8 | 99.93% | cvelistv5 | 2026-08-31 |
| cve-2022-42856 | SUSE CVE CVE-2022-42856 | HIGH | 8.8 | 8.52% | cvelistv5 | 2026-09-02 |
| cve-2022-4262 | chromium-browser: Type Confusion in V8 | HIGH | 8.8 | 15.98% | cvelistv5 | 2025-11-21 |
| cve-2022-4257 | CVE-2022-4257 | MEDIUM | 6.3 | 43.93% | cvelistv5 | |
| cve-2022-42475 | Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability | CRITICAL | 9.3 | 99.47% | cvelistv5 | 2022-12-13 |
| cve-2022-41840 | WordPress Welcart eCommerce plugin <= 2.7.7 - Unauth. Directory Traversal vulnerability | HIGH | 7.5 | 5.52% | cvelistv5 | 2026-06-17 |
| cve-2022-41800 | CVE-2022-41800 | HIGH | 8.7 | 76.87% | cvelistv5 | |
| cve-2022-41412 | An issue in the graphData.cgi component of perfSONAR v4.4.5 and prior allows attackers to access sensitive data and execute Server-Side Request Forgery (SSRF) attacks. | HIGH | 8.6 | 4.20% | cvelistv5 | 2026-06-17 |
| cve-2022-41352 | An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0 | CRITICAL | 9.8 | 95.48% | cvelistv5 | 2026-09-10 |
| cve-2022-4135 | Google Chromium GPU Heap Buffer Overflow Vulnerability | HIGH | N/A | 31.86% | cvelistv5 | 2022-11-28 |
| cve-2022-4117 | CVE-2022-4117 | CRITICAL | 9.8 | 4.96% | cvelistv5 | |
| cve-2022-41128 | Microsoft Windows Scripting Languages Remote Code Execution Vulnerability | HIGH | 8.8 | 24.62% | cvelistv5 | 2022-11-08 |
| cve-2022-41125 | Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability | HIGH | N/A | 3.05% | cvelistv5 | 2022-11-08 |
| cve-2022-41091 | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | CRITICAL | N/A | 1.81% | cvelistv5 | 2022-11-08 |
| cve-2022-41082 | Microsoft Exchange Server Remote Code Execution Vulnerability | HIGH | 8.0 | 99.97% | cvelistv5 | 2022-09-30 |
| cve-2022-41080 | Microsoft Exchange Server Privilege Escalation Vulnerability | HIGH | 8.8 | 77.33% | cvelistv5 | 2023-01-10 |
| cve-2022-41073 | Microsoft Windows Print Spooler Privilege Escalation Vulnerability | CRITICAL | N/A | 2.28% | cvelistv5 | 2022-11-08 |
| cve-2022-41049 | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | HIGH | N/A | 2.49% | cvelistv5 | 2022-11-14 |
| cve-2022-41040 | Microsoft Exchange Server Server-Side Request Forgery Vulnerability | HIGH | 8.8 | 99.96% | cvelistv5 | 2022-09-30 |