Skip to main content

CISA KEV catalog

Exploited CVEs added to CISA KEV in 2022

CISA added 555 vulnerabilities to its Known Exploited Vulnerabilities catalog in 2022, each confirmed as used by attackers. Open any one for its EPSS exploit score, CVSS severity, CISA’s deadline and the vendor’s fix. If a scan finds one of these on your network, fix it first.

New to this? What CISA KEV is and how to use it. Got a CVE that isn’t listed? Check any CVE.

All 2022 additions, newest first

Source: CISA Known Exploited Vulnerabilities catalog (version 2026.10.30), refreshed several times a day.

Cookie preferences

Essential site functions remain available whichever option you choose. Your advertising choice is saved on this site. The Scan Hub has a separate choice.

Google and Reddit may receive cookies, identifiers, browser and device information, and your network/IP information. Reject or withdraw at any time. Read the Privacy Policy.