Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2022-22718 | Microsoft Windows Print Spooler Privilege Escalation Vulnerability | HIGH | 7.8 | N/A | cvelistv5 | 2022-04-19 |
| cve-2022-22706 | Arm Mali GPU Kernel Driver Unspecified Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2023-03-30 |
| cve-2022-22675 | Apple macOS Out-of-Bounds Write Vulnerability | HIGH | 7.8 | N/A | cvelistv5 | 2022-04-04 |
| cve-2022-22674 | Apple macOS Out-of-Bounds Read Vulnerability | MEDIUM | 5.5 | N/A | cvelistv5 | 2022-04-04 |
| cve-2022-22620 | SUSE CVE CVE-2022-22620 | HIGH | 8.8 | N/A | cvelistv5 | 2026-08-29 |
| cve-2022-22587 | Apple Memory Corruption Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2022-01-28 |
| cve-2022-22536 | SAP Multiple Products HTTP Request Smuggling Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2022-08-18 |
| cve-2022-22274 | CVE-2022-22274 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-22265 | Samsung Mobile Devices Use-After-Free Vulnerability | MEDIUM | 5.0 | N/A | cvelistv5 | 2023-09-18 |
| cve-2022-22242 | Junos OS: Cross-site Scripting (XSS) vulnerability in J-Web | MEDIUM | 6.1 | N/A | cvelistv5 | 2026-06-17 |
| cve-2022-21999 | Microsoft Windows Print Spooler Privilege Escalation Vulnerability | CRITICAL | N/A | N/A | cvelistv5 | 2022-03-25 |
| cve-2022-21971 | Microsoft Windows Runtime Remote Code Execution Vulnerability | HIGH | 7.8 | N/A | cvelistv5 | 2022-08-18 |
| cve-2022-21919 | Microsoft Windows User Profile Service Privilege Escalation Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2022-04-25 |
| cve-2022-21894 | CVE-2022-21894 | MEDIUM | 4.4 | N/A | cvelistv5 | |
| cve-2022-21882 | Microsoft Win32k Privilege Escalation Vulnerability | HIGH | 7.0 | N/A | cvelistv5 | 2022-02-04 |
| cve-2022-21661 | wordpress: SQL injection via WP_Query | HIGH | 8.0 | N/A | cvelistv5 | 2025-11-21 |
| cve-2022-21587 | Oracle E-Business Suite Unspecified Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2023-02-02 |
| cve-2022-21500 | CVE-2022-21500 | HIGH | 7.5 | N/A | cvelistv5 | |
| cve-2022-20703 | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | CRITICAL | 10.0 | N/A | cvelistv5 | 2022-03-03 |
| cve-2022-20699 | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | CRITICAL | 10.0 | N/A | cvelistv5 | 2022-03-03 |
| cve-2022-1952 | CVE-2022-1952 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-1950 | CVE-2022-1950 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-1916 | Active Products Tables for WooCommerce < 1.0.5 - Reflected Cross-Site-Scripting | MEDIUM | 6.1 | N/A | cvelistv5 | 2026-06-17 |
| cve-2022-1883 | CVE-2022-1883 | CRITICAL | 9.6 | N/A | cvelistv5 | |
| cve-2022-1768 | CVE-2022-1768 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2022-1574 | HTML2WP <= 1.0.0 - Unauthenticated Arbitrary File Upload | CRITICAL | 9.8 | N/A | cvelistv5 | 2026-06-17 |
| cve-2022-1439 | CVE-2022-1439 | MEDIUM | 6.3 | N/A | cvelistv5 | |
| cve-2022-1390 | CVE-2022-1390 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-1388 | F5 BIG-IP Missing Authentication Vulnerability | CRITICAL | N/A | N/A | cvelistv5 | 2022-05-10 |
| cve-2022-1386 | CVE-2022-1386 | HIGH | N/A | N/A | cvelistv5 |