Zero-day report: February 2022
CISA added 32 exploited vulnerabilities to its catalog in February 2022, 8 fewer than January (40). 3 were zero-days, listed within a week of going public. 10 are known to be used by ransomware. The most-hit vendor was Microsoft, with 16.
By technology
Most-hit vendors
Every flaw added in February 2022
- Microsoft · WindowsMicrosoft Windows Code Injection Vulnerability
- Microsoft · Internet ExplorerMicrosoft Internet Explorer Remote Code Execution Vulnerability
- Microsoft · OfficeMicrosoft Office Remote Code Execution Vulnerability
- Synacor · Zimbra Collaborate Suite (ZCS)Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability
- Zabbix · FrontendZabbix Frontend Authentication Bypass Vulnerability
- Zabbix · FrontendZabbix Frontend Improper Access Control Vulnerability
- Microsoft · Graphics ComponentMicrosoft Graphics Component Memory Corruption Vulnerability
- Microsoft · WordMicrosoft Word Memory Corruption Vulnerability
- PHPUnit · PHPUnitPHPUnit Command Injection Vulnerability
- Adobe · Flash PlayerAdobe Flash Player Use-After-Free Vulnerability
- RARLAB · WinRARWinRAR Absolute Path Traversal Vulnerability
- Microsoft · WindowsMicrosoft Windows VBScript Engine Out-of-Bounds Write Vulnerability
- Microsoft · Internet ExplorerMicrosoft Internet Explorer Type Confusion Vulnerability
- Google · Chromium AnimationGoogle Chromium Animation Use-After-Free Vulnerability
- Adobe · Commerce and Magento Open SourceAdobe Commerce and Magento Open Source Improper Input Validation Vulnerability
- Apple · iOS, iPadOS, and macOSApple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability
- Apple · OS XApple OS X Heap-Based Buffer Overflow Vulnerability
- Apple · OS XApple OS X Authentication Bypass Vulnerability
- Microsoft · HTTP.sysMicrosoft HTTP.sys Remote Code Execution Vulnerability
- D-Link · DIR-645 RouterD-Link DIR-645 Router Remote Code Execution Vulnerability
- Apache · ActiveMQApache ActiveMQ Improper Input Validation Vulnerability
- Microsoft · SMBv1Microsoft SMBv1 Remote Code Execution Vulnerability
- Microsoft · SMBv1Microsoft SMBv1 Remote Code Execution Vulnerability
- Microsoft · OfficeMicrosoft Office Remote Code Execution Vulnerability
- Microsoft · Win32kMicrosoft Win32k Privilege Escalation Vulnerability
- Oracle · WebLogic ServerOracle Corporation WebLogic Server Remote Code Execution Vulnerability
- Microsoft · WindowsMicrosoft Windows Shell (.lnk) Remote Code Execution Vulnerability
- Apache · Struts 1Apache Struts 1 Improper Input Validation Vulnerability
- Jenkins · Jenkins Stapler Web FrameworkJenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability
- Microsoft · SMBv3Microsoft SMBv3 Remote Code Execution Vulnerability
- Microsoft · WindowsMicrosoft Windows SAM Local Privilege Escalation Vulnerability
- Microsoft · Win32kMicrosoft Win32k Privilege Escalation Vulnerability
Source: CISA's Known Exploited Vulnerabilities catalog, by the date CISA added each flaw. Ransomware use is CISA's flag.