Month report
May 2022
Rolled up 2026-08-09 20:45 from 370,700 CVE records
2,161 CVEs published, +44.6% on the same month last year. 96 rated critical, 83 listed by CISA as exploited. adobe led with 97; the most common weakness class was CWE-79 (166). polonel climbed 79 places, the largest move. 6 vendors ranked for the first time.
Published
2,161
+6%on the previous month
Critical / high
96 / 414
of the 1,004 scored
Medium / low
447 / 47
the rest of the scored bands
Added to CISA KEV
83
listed as exploited this month
Public exploit
113
exploit code indexed publicly
Scanner template
0
0% of the month
Publication to KEV
How long before CISA listed them
9 published this month and listed since — not the 83 listed during it.
Median days to listing
5
from publication to CISA's date added
Listed within 7 days
55.6%
of the 9
Listed within 30 days
55.6%
of the 9
Detection gap
Listed as exploited, no public template
CVEs CISA listed this month
Listed this month
83
added to the CISA KEV catalog
With a template
4
4.8% covered
No template
79
nothing in the public index
Measured against the nuclei-templates CVE index only. No template there does not mean a CVE is undetectable by any other tool.
Vendors
Ranked by distinct CVEs this month
Δ is the move against last month's rank.
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | adobe | 97 | acrobat reader (64) · photoshop (14) · framemaker (10) | · | ||||
| 2 | microsoft | 74 | 3 | 2 | 5 | windows server version 20h2 (59) · windows server 2019 (57) · windows server 2022 (57) | ↓1 | |
| 3 | apple | 73 | 2 | 2 | 5 | macos (48) · security update catalina (17) · watchos (13) | · | |
| 4 | cisco | 48 | 3 | 1 | cisco common services platform collector software (9) · cisco firepower threat defense software (7) · cisco adaptive security appliance asa software (6) | ↓1 | ||
| 5 | f5 | 43 | 1 | 1 | 1 | big ip (27) · big ip apm (6) · big ip guided configuration gc (4) | · | |
| 6 | ibm | 36 | robotic process automation (5) · guardium data encryption (4) · datapower gateway (3) | — | ||||
| 7 | amd | 32 | athlon series (18) · ryzen series (18) · epyc processors (12) | · | ||||
| 8 | siemens | 31 | 1 | sicam t (10) · desigo pxc4 (8) · desigo pxc5 (8) | ↑1 | |||
| 9 | jenkins project | 28 | jenkins autocomplete parameter plugin (3) · jenkins ssh plugin (3) · jenkins blue ocean plugin (2) | ↑4 | ||||
| 10 | mediatek | 28 | mt6580 mt6739 mt6761 mt6762 mt6765 mt6768 mt6769 mt6771 mt6779 mt6781 mt6785 mt6789 mt6833 mt6853 mt6853t mt6873 mt6875 mt6877 mt6879 mt6883 mt6885 mt6889 mt6891 mt6893 mt6895 mt6983 mt8163 mt8167 mt8168 mt8173 mt8185 mt8321 mt8362a mt8365 mt8735 mt8735b mt8765 mt8766 mt8768 mt8786 mt8788 mt8789 mt8791 mt8797 (8) · mt6580 mt6735 mt6737 mt6739 mt6750 mt6750s mt6753 mt6757 mt6757c mt6757cd mt6757ch mt6761 mt6762 mt6763 mt6765 mt6768 mt6769 mt6771 mt6779 mt6781 mt6785 mt6797 mt6833 mt6853 mt6853t mt6873 mt6875 mt6877 mt6883 mt6885 mt6889 mt6893 mt8167 mt8168 mt8173 mt8185 mt8321 mt8362a mt8365 mt8385 mt8666 mt8675 mt8695 mt8696 mt8765 mt8766 mt8768 mt8786 mt8788 mt8789 mt8791 mt8797 (4) · mt9011 mt9215 mt9216 mt9220 mt9221 mt9255 mt9256 mt9266 mt9269 mt9285 mt9286 mt9288 mt9600 mt9602 mt9610 mt9611 mt9612 mt9613 mt9615 mt9617 mt9629 mt9630 mt9631 mt9632 mt9636 mt9638 mt9639 mt9650 mt9652 mt9666 mt9669 mt9670 mt9675 mt9685 mt9686 mt9688 (4) | ↑1 | ||||
| 11 | tensorflow | 24 | tensorflow (24) | · | ||||
| 12 | hcl software | 23 | 1 | bigfix platform (5) · sametime (5) · hcl bigfix mobile modern client management (3) | · | |||
| 13 | vim | 20 | vim vim (20) | · | ||||
| 14 | inhand networks | 19 | 13 | inrouter302 (19) | · | |||
| 15 | delta electronics | 14 | 11 | diaenergie (11) · diascreen (2) · dmars (1) | ↑67 | |||
| 16 | gitlab | 14 | gitlab (14) | ↓6 | ||||
| 17 | polonel | 14 | 4 | polonel trudesk (14) | ↑79 | |||
| 18 | samsung mobile | 14 | samsung mobile devices (10) · galaxy store (1) · gear iconx pc manager (1) | ↓14 | ||||
| 19 | huawei | 13 | emui (13) · harmonyos (12) · magic ui (2) | ↑6 | ||||
| 20 | jgraph | 12 | 1 | jgraph drawio (12) | new | |||
| 21 | nvidia | 12 | nvidia gpu display driver (10) · nvidia virtual gpu software and nvidia cloud gaming (2) | ↑15 | ||||
| 22 | secomea | 11 | 1 | gatemanager (9) · sitemanager (3) · linkmanager (1) | · | |||
| 23 | qnap systems | 10 | 1 | qts (5) · quts hero (5) · qutscloud (5) | · | |||
| 24 | apache | 9 | 1 | apache tika (3) · apache tomcat (2) · apache archiva (1) | ↓3 | |||
| 25 | fidelis cybersecurity | 9 | 2 | fidelis deception (9) · fidelis network (9) | · | |||
| 26 | fortinet | 9 | fortinet fortios (2) · fortinet forticlientlinux (1) · fortinet forticlientwindows (1) | ↓12 | ||||
| 27 | lenovo | 9 | personal cloud storage a1 (5) · personal cloud storage t1 (5) · personal cloud storage t2 (5) | ↓10 | ||||
| 28 | acronis | 8 | acronis cyber protect 15 (5) · acronis snap deploy (3) · acronis agent (1) | · | ||||
| 29 | dell | 8 | 2 | cpg bios (2) · cloudlink (1) · dell os recovery tool (1) | ↓21 | |||
| 30 | open automation software | 8 | 2 | oas platform (8) | new | |||
| 31 | cambium networks | 7 | 1 | cnmaestro (7) | · | |||
| 32 | sap se | 7 | sap host agent (2) · sap businessobjects enterprise central management server (1) · sap employee self service fiori my leave request (1) | ↓20 | ||||
| 33 | splunk | 7 | splunk enterprise (7) | · | ||||
| 34 | nextcloud | 6 | security advisories (6) | ↑1 | ||||
| 35 | tibco software | 6 | tibco businessconnect trading community management (3) · tibco bpm enterprise (1) · tibco bpm enterprise distribution for tibco silver fabric (1) | · | ||||
| 36 | xwiki | 6 | 1 | xwiki platform (5) · xwiki commons (1) | ↑23 | |||
| 37 | publify | 5 | 2 | publify publify (5) | new | |||
| 38 | sonicwall | 5 | sonicwall sma1000 (3) · sonicwall global vpn client (1) · sonicwall netextender windows 32 and 64 bit client (1) | ↑7 | ||||
| 39 | suse | 5 | rancher (4) · open build service (1) | ↑29 | ||||
| 40 | sysaid | 5 | sysaid (5) | new | ||||
| 41 | trend micro | 5 | trend micro apex one (2) · trend micro password manager (2) · trend micro maximum security (1) | · | ||||
| 42 | zyxel | 5 | 1 | 1 | 1 | atp series firmware (5) · vpn series firmware (5) · usg flex series firmware (4) | ↑31 | |
| 43 | adam skaat | 4 | countdown clock wordpress plugin (4) | new | ||||
| 44 | argoproj | 4 | 1 | argo cd (3) · argo workflows (1) | · | |||
| 45 | eipstackgroup | 4 | opener ethernet ip (4) | new | ||||
| 46 | f secure | 4 | f secure mobile security (2) · all f secure withsecure endpoint protection products for windows and mac f secure linux security 32 bit f secure linux security 64 bit f secure atlant withsecure cloud protection for salesforce withsecure collaboration protection (1) · f secure endpoint protection products for windows and mac f secure linux security 32 bit f secure linux security 64 f secure atlant withsecure cloud protection for salesforce withsecure collaboration protection (1) | ↑3 | ||||
| 47 | jetbrains | 4 | teamcity (3) · ktor (1) | ↓32 | ||||
| 48 | myscada | 4 | mypro (4) | · | ||||
| 49 | openssl | 4 | 1 | 1 | openssl (4) | · | ||
| 50 | palo alto networks | 4 | cortex xdr agent (2) · cortex xsoar (1) · pan os (1) | · |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2022-05 that are on the CISA KEV catalog today. The 83 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-791667 critical—
- 2CWE-20614 critical—
- 3CWE-416470 critical↑18
- 4CWE-125450 critical↑6
- 5CWE-787421 critical↑12
- 6CWE-893814 critical↑1
- 7CWE-190262 critical↑29
- 8CWE-400220 critical↑8
- 9CWE-284214 critical↓3
- 10CWE-78207 critical↑25
- 1CWE-287194 critical↑3
- 2CWE-121173 critical↑11
- 3CWE-22171 critical↓9
- 4CWE-352170 critical↓6
- 5CWE-200161 critical↓10
- 6CWE-269151 critical↑2
- 7CWE-306154 critical↑14
- 8CWE-918152 critical↑8
- 9CWE-476140 critical↓7
- 10CWE-120121 critical↓1
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.