Zero-day report: March 2022
CISA added 226 exploited vulnerabilities to its catalog in March 2022, 194 more than February (32). 5 were zero-days, listed within a week of going public. 51 are known to be used by ransomware. The most-hit vendor was Microsoft, with 70.
By technology
Most-hit vendors
Every flaw added in March 2022
- Dasan · Gigabit Passive Optical Network (GPON) RoutersDasan GPON Routers Authentication Bypass Vulnerability
- Dasan · Gigabit Passive Optical Network (GPON) RoutersDasan GPON Routers Command Injection Vulnerability
- Dell · dbutil DriverDell dbutil Driver Insufficient Access Control Vulnerability
- QNAP · Network Attached Storage (NAS)QNAP NAS Improper Authorization Vulnerability
- Microsoft · WindowsMicrosoft Windows User Profile Service Privilege Escalation Vulnerability
- Sophos · FirewallSophos Firewall Authentication Bypass Vulnerability
- Trend Micro · Apex CentralTrend Micro Apex Central Arbitrary File Upload Vulnerability
- Microsoft · WindowsMicrosoft Windows Kernel Stack-Based Buffer Overflow Vulnerability
- Microsoft · Ancillary Function Driver (afd.sys)Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability
- Oracle · Fusion MiddlewareOracle Fusion Middleware Unspecified Vulnerability
- Adobe · Flash PlayerAdobe Flash Player Memory Corruption Vulnerability
- Microsoft · WordMicrosoft Word Remote Code Execution Vulnerability
- Oracle · Java SEOracle Java SE Sandbox Bypass Vulnerability
- Mozilla · Firefox and ThunderbirdMozilla Firefox and Thunderbird Denial-of-Service Vulnerability
- Oracle · Java SEOracle Java SE Unspecified Vulnerability
- Microsoft · Internet ExplorerMicrosoft Internet Explorer Use-After-Free Vulnerability
- Adobe · Reader and AcrobatAdobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability
- Microsoft · Win32kMicrosoft Win32k Privilege Escalation Vulnerability
- Microsoft · OfficeMicrosoft Office Uninitialized Memory Use Vulnerability
- Microsoft · Internet ExplorerMicrosoft Internet Explorer Memory Corruption Vulnerability
- Microsoft · WindowsMicrosoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability
- Microsoft · WindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability
- Microsoft · Client-Server Run-time Subsystem (CSRSS)Microsoft Windows CSRSS Security Feature Bypass Vulnerability
- Microsoft · Internet ExplorerMicrosoft Internet Explorer Memory Corruption Vulnerability
- Microsoft · EdgeMicrosoft Edge Memory Corruption Vulnerability
- Microsoft · EdgeMicrosoft Edge Memory Corruption Vulnerability
- Microsoft · Edge and Internet ExplorerMicrosoft Edge and Internet Explorer Type Confusion Vulnerability
- Microsoft · Internet ExplorerMicrosoft Internet Explorer Information Disclosure Vulnerability
- Microsoft · WindowsMicrosoft Windows Privilege Escalation Vulnerability
- Microsoft · DirectX Graphics Kernel (DXGKRNL)Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability
- Microsoft · DirectX Graphics Kernel (DXGKRNL)Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability
- Microsoft · WindowsMicrosoft Windows Privilege Escalation Vulnerability
- SonicWall · SMA100SonicWall SMA100 Directory Traversal Vulnerability
- SonicWall · Secure Remote Access (SRA)SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability
- Atlassian · Confluence ServerAtlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability
- Microsoft · WindowsMicrosoft Windows Event Tracing Privilege Escalation Vulnerability
- Microsoft · OfficeMicrosoft Office Access Connectivity Engine Remote Code Execution Vulnerability
- Redis · Debian-specific Redis ServersDebian-specific Redis Server Lua Sandbox Escape Vulnerability
- Google · Chromium V8Google Chromium V8 Type Confusion Vulnerability
- Hewlett Packard (HP) · OpenView Network Node ManagerHP OpenView Network Node Manager Remote Code Execution Vulnerability
- Adobe · Reader and AcrobatAdobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability
- phpMyAdmin · phpMyAdminphpMyAdmin Remote Code Execution Vulnerability
- Cisco · IOS XRCisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
- Adobe · ColdFusionAdobe ColdFusion Directory Traversal Vulnerability
- Cisco · IOS XRCisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
- Exim · EximExim Heap-Based Buffer Overflow Vulnerability
- Exim · EximExim Privilege Escalation Vulnerability
- PHP · PHPPHP-CGI Query String Parameter Vulnerability
- Apache · StrutsApache Struts Improper Input Validation Vulnerability
- Hewlett Packard (HP) · ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle ManagementHP Multiple Products Remote Code Execution Vulnerability
- D-Link · DSL-2760UD-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability
- Rails · Ruby on RailsRuby on Rails Directory Traversal Vulnerability
- Elastic · ElasticsearchElasticsearch Remote Code Execution Vulnerability
- Rejetto · HTTP File Server (HFS)Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability
- Microsoft · Kerberos Key Distribution Center (KDC)Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability
- Microsoft · WindowsMicrosoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability
- Cisco · Prime Data Center Network Manager (DCNM)Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability
- D-Link and TRENDnet · Multiple DevicesD-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability
- Elastic · ElasticsearchElasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability
- TP-Link · Multiple Archer DevicesTP-Link Multiple Archer Devices Directory Traversal Vulnerability
- Arcserve · Unified Data Protection (UDP)Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability
- Rails · Ruby on RailsRuby on Rails Directory Traversal Vulnerability
- NETGEAR · WNR2000v5 RouterNETGEAR WNR2000v5 Router Buffer Overflow Vulnerability
- D-Link · DCS-930L DevicesD-Link DCS-930L Devices OS Command Injection Vulnerability
- NETGEAR · Wireless Access Point (WAP) DevicesNETGEAR Multiple WAP Devices Command Injection Vulnerability
- Adobe · Flash PlayerAdobe Flash Player Remote Code Execution Vulnerability
- Adobe · Flash PlayerAdobe Flash Player Use-After-Free Vulnerability
- Microsoft · WindowsMicrosoft Windows SMB Remote Code Execution Vulnerability
- Apache · TomcatApache Tomcat on Windows Remote Code Execution Vulnerability
- Apache · TomcatApache Tomcat Remote Code Execution Vulnerability
- Cisco · IOS and IOS XECisco IOS and IOS XE Remote Code Execution Vulnerability
- Citrix · NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile ServerCitrix Multiple Products Remote Code Execution Vulnerability
- NETGEAR · DGN2200 DevicesNETGEAR DGN2200 Devices OS Command Injection Vulnerability
- Cisco · VPN RoutersCisco VPN Routers Remote Code Execution Vulnerability
- Cisco · Secure Access Control System (ACS)Cisco Secure Access Control System Java Deserialization Vulnerability
- Quest · KACE System Management ApplianceQuest KACE System Management Appliance Remote Command Execution Vulnerability
- VMware Tanzu · Spring Data CommonsVMware Tanzu Spring Data Commons Property Binder Vulnerability
- LG · N1A1 NASLG N1A1 NAS Remote Command Execution Vulnerability
- VMware · SD-WAN EdgeVMware SD-WAN Edge by VeloCloud Command Injection Vulnerability
- Microsoft · Internet Explorer Scripting EngineMicrosoft Scripting Engine Memory Corruption Vulnerability
- Microsoft · WindowsMicrosoft Windows Shell Remote Code Execution Vulnerability
- Microsoft · Graphics Device Interface (GDI)Microsoft GDI Remote Code Execution Vulnerability
- Jenkins · Matrix Project PluginJenkins Matrix Project Plugin Remote Code Execution Vulnerability
- Kentico · XperienceKentico Xperience Deserialization of Untrusted Data Vulnerability
- PHP · FastCGI Process Manager (FPM)PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability
- Citrix · SD-WAN and NetScalerCitrix SD-WAN and NetScaler SQL Injection Vulnerability
- Citrix · SD-WAN and NetScalerCitrix SD-WAN and NetScaler Command Injection Vulnerability
- Webmin · WebminWebmin Command Injection Vulnerability
- D-Link · Multiple RoutersD-Link Multiple Routers Command Injection Vulnerability
- Oracle · BI Publisher (Formerly XML Publisher)Oracle BI Publisher Unauthorized Access Vulnerability
- Drupal · CoreDrupal Core Remote Code Execution Vulnerability
- Juniper · Junos OSJuniper Junos OS Path Traversal Vulnerability
- Apache · KylinApache Kylin OS Command Injection Vulnerability
- Palo Alto Networks · PAN-OSPalo Alto Networks PAN-OS Authentication Bypass Vulnerability
- QNAP Systems · HelpdeskQNAP Helpdesk Improper Access Control Vulnerability
- Sophos · SG UTMSophos SG UTM Remote Code Execution Vulnerability
- VMware Tanzu · Spring Cloud Configuration (Config) ServerVMware Tanzu Spring Cloud Config Directory Traversal Vulnerability
- OpenBSD · OpenSMTPDOpenSMTPD Remote Code Execution Vulnerability
- Zyxel · Multiple Network-Attached Storage (NAS) DevicesZyxel Multiple NAS Devices OS Command Injection Vulnerability
- D-Link · DIR-610 DevicesD-Link DIR-610 Devices Remote Command Execution
- Citrix · ShareFileCitrix ShareFile Improper Access Control Vulnerability
- Sitecore · XPSitecore XP Remote Command Execution Vulnerability
- Microsoft · WindowsMicrosoft Windows Print Spooler Privilege Escalation Vulnerability
- Mitel · MiCollab, MiVoice Business ExpressMiCollab, MiVoice Business Express Access Control Vulnerability
- WatchGuard · Firebox and XTM AppliancesWatchGuard Firebox and XTM Appliances Arbitrary Code Execution
- Microsoft · Win32kMicrosoft Win32k Memory Corruption Vulnerability
- Microsoft · WindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability
- Microsoft · WindowsMicrosoft Windows Transaction Manager Privilege Escalation Vulnerability
- Microsoft · Win32kMicrosoft Win32k Privilege Escalation Vulnerability
- Microsoft · WindowsMicrosoft Windows Privilege Escalation Vulnerability
- Microsoft · WindowsMicrosoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
- Microsoft · WindowsMicrosoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
- Microsoft · Task SchedulerMicrosoft Task Scheduler Privilege Escalation Vulnerability
- Microsoft · WindowsMicrosoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
- Microsoft · Win32kMicrosoft Win32k Privilege Escalation Vulnerability
- Microsoft · WindowsMicrosoft Windows AppX Deployment Server Privilege Escalation Vulnerability
- Microsoft · WindowsMicrosoft Windows Error Reporting Manager Privilege Escalation Vulnerability
- Microsoft · WindowsMicrosoft Windows Privilege Escalation Vulnerability
- Microsoft · WindowsMicrosoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability
- SonicWall · SonicOSSonicWall SonicOS Buffer Overflow Vulnerability
- Adobe · BlazeDSAdobe BlazeDS Information Disclosure Vulnerability
- Adobe · ColdFusionAdobe ColdFusion Authentication Bypass Vulnerability
- Adobe · ColdFusionAdobe ColdFusion Directory Traversal Vulnerability
- Adobe · ColdFusionAdobe ColdFusion Information Disclosure Vulnerability
- NETGEAR · Multiple RoutersNETGEAR Multiple Routers Remote Code Execution Vulnerability
- NETGEAR · Wireless Router DGN2200NETGEAR DGN2200 Remote Code Execution Vulnerability
- Atlassian · Jira Server and Data CenterAtlassian Jira Server and Data Center Server-Side Template Injection Vulnerability
- Pulse Secure · Pulse Connect SecurePulse Connect Secure Code Injection Vulnerability
- VMware · vCenter Server and Cloud FoundationVMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability
- Mozilla · FirefoxMozilla Firefox Use-After-Free Vulnerability
- Mozilla · FirefoxMozilla Firefox Use-After-Free Vulnerability
- Microsoft · WindowsMicrosoft Windows Privilege Escalation Vulnerability
- Microsoft · WindowsMicrosoft Windows Privilege Escalation Vulnerability
- Adobe · Acrobat and ReaderAdobe Reader and Acrobat Input Validation Vulnerability
- Oracle · VirtualBoxOracle VirtualBox Insufficient Input Validation Vulnerability
- Microsoft · WindowsMicrosoft Windows Improper Input Validation Vulnerability
- Microsoft · ExcelMicrosoft Excel Featheader Record Memory Corruption Vulnerability
- Adobe · Reader and AcrobatAdobe Reader and Acrobat Arbitrary Code Execution Vulnerability
- Microsoft · WindowsMicrosoft Windows Kernel Exception Handler Vulnerability
- Microsoft · OfficeMicrosoft Office Stack-based Buffer Overflow Vulnerability
- Adobe · Flash PlayerAdobe Flash Player Remote Code Execution Vulnerability
- Microsoft · Forefront Threat Management Gateway (TMG)Microsoft Forefront TMG Remote Code Execution Vulnerability
- Oracle · Java SE JDK and JREOracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
- Oracle · Java SEOracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
- Adobe · Flash PlayerAdobe Flash Player Arbitrary Code Execution Vulnerability
- Oracle · Java SEOracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
- Microsoft · OfficeMicrosoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability
- Oracle · Java SEOracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
- Adobe · ColdFusionAdobe ColdFusion Authentication Bypass Vulnerability
- Adobe · Reader and AcrobatAdobe Reader and Acrobat Memory Corruption Vulnerability
- Adobe · ReaderAdobe Reader Buffer Overflow Vulnerability
- Microsoft · Internet ExplorerMicrosoft Internet Explorer Remote Code Execution Vulnerability
- Mozilla · FirefoxMozilla Firefox Information Disclosure Vulnerability
- Adobe · Reader and AcrobatAdobe Reader and Acrobat Memory Corruption Vulnerability
- Microsoft · Internet ExplorerMicrosoft Internet Explorer Use-After-Free Vulnerability
- Microsoft · WindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability
- Adobe · Reader and AcrobatAdobe Reader and Acrobat Use-After-Free Vulnerability
- Microsoft · WindowsMicrosoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability
- Microsoft · OfficeMicrosoft Office Memory Corruption Vulnerability
- Microsoft · Win32kMicrosoft Win32k Privilege Escalation Vulnerability
- Microsoft · ATM Font DriverMicrosoft ATM Font Driver Privilege Escalation Vulnerability
- Microsoft · PowerPointMicrosoft PowerPoint Memory Corruption Vulnerability
- Microsoft · OfficeMicrosoft Office Malformed EPS File Vulnerability
- Oracle · Java SEOracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
- Adobe · Flash PlayerAdobe Flash Player Memory Corruption Vulnerability
- Oracle · Java SEOracle Java SE Integrity Check Vulnerability
- Adobe · Flash PlayerAdobe Flash Player Use-After-Free Vulnerability
- Adobe · Flash PlayerAdobe Flash Player Arbitrary Code Execution Vulnerability
- Microsoft · WindowsMicrosoft Windows Secondary Logon Service Privilege Escalation Vulnerability
- Adobe · Flash PlayerAdobe Flash Player Arbitrary Code Execution Vulnerability
- Adobe · Flash PlayerAdobe Flash Player Arbitrary Code Execution Vulnerability
- Linux · KernelLinux Kernel Race Condition Vulnerability
- Microsoft · OfficeMicrosoft Office Memory Corruption Vulnerability
- Microsoft · ExcelMicrosoft Office Security Feature Bypass Vulnerability
- Adobe · Flash PlayerAdobe Flash Player Use-After-Free Vulnerability
- Siemens · SIMATIC CPSiemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability
- Microsoft · Graphics Device Interface (GDI)Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability
- Microsoft · OfficeMicrosoft Office Use-After-Free Vulnerability
- Adobe · Flash PlayerAdobe Flash Player Type Confusion Vulnerability
- Microsoft · OfficeMicrosoft Office Remote Code Execution Vulnerability
- Cisco · IOS softwareCisco IOS Software Network Address Translation Denial-of-Service Vulnerability
- Cisco · IOS softwareCisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability
- Cisco · IOS softwareCisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
- Cisco · IOS softwareCisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
- Cisco · IOS softwareCisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability
- Cisco · IOS and IOS XE SoftwareCisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability
- Cisco · Catalyst 6800 Series SwitchesCisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability
- Cisco · IOS and IOS XE SoftwareCisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability
- Cisco · IOS XE SoftwareCisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability
- Cisco · IOS and IOS XE SoftwareCisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability
- Cisco · IOS and IOS XE SoftwareCisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability
- Cisco · IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
- Cisco · IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
- Cisco · IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
- Cisco · IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
- Cisco · IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
- Cisco · IOS and IOS XE SoftwareCisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
- Cisco · IOS softwareCisco IOS Software SNMP Remote Code Execution Vulnerability
- Microsoft · Malware Protection EngineMicrosoft Malware Protection Engine Improper Restriction of Operations Vulnerability
- Cisco · IOS and IOS XE SoftwareCisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability
- Cisco · IOS SoftwareCisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability
- Cisco · Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series SwitchesCisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability
- Cisco · IOS Software and Cisco IOS XE SoftwareCisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability
- Cisco · IOS Software and Cisco IOS XE SoftwareCisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability
- Cisco · IOS Software and Cisco IOS XE SoftwareCisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability
- Cisco · IOS SoftwareCisco IOS Software Resource Management Errors Vulnerability
- Cisco · IOS, XR, and XE SoftwareCisco IOS, XR, and XE Software Buffer Overflow Vulnerability
- Cisco · IOS and IOS XE SoftwareCisco IOS and IOS XE Software Improper Input Validation Vulnerability
- Cisco · IOS and IOS XE SoftwareCisco IOS and IOS XE Software Improper Input Validation Vulnerability
- Cisco · IOS XE SoftwareCisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability
- Cisco · IOS, XR, and XE SoftwareCisco IOS, XR, and XE Software Buffer Overflow Vulnerability
- Cisco · IOS SoftwareCisco IOS Software Denial-of-Service Vulnerability
- Cisco · IOS SoftwareCisco IOS Software Denial-of-Service Vulnerability
- ChakraCore · ChakraCore scripting engineChakraCore Scripting Engine Type Confusion Vulnerability
- Microsoft · Exchange ServerMicrosoft Exchange Server Privilege Escalation Vulnerability
- Microsoft · ExcelMicrosoft Excel Remote Code Execution Vulnerability
- Cisco · Small Business RV320 and RV325 Dual Gigabit WAN VPN RoutersCisco Small Business Routers Improper Input Validation Vulnerability
- Exim · Exim Internet MailerExim Out-of-bounds Write Vulnerability
- Treck TCP/IP stack · IPv6Treck TCP/IP stack Out-of-Bounds Read Vulnerability
- Apache · TomcatApache Tomcat Improper Privilege Management Vulnerability
- Microsoft · WindowsMicrosoft Windows Installer Privilege Escalation Vulnerability
- Cisco · Small Business RV160, RV260, RV340, and RV345 Series RoutersCisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
- Cisco · Small Business RV160, RV260, RV340, and RV345 Series RoutersCisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
- Cisco · Small Business RV160, RV260, RV340, and RV345 Series RoutersCisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
- Cisco · Small Business RV160, RV260, RV340, and RV345 Series RoutersCisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
- Cisco · Small Business RV160, RV260, RV340, and RV345 Series RoutersCisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
Source: CISA's Known Exploited Vulnerabilities catalog, by the date CISA added each flaw. Ransomware use is CISA's flag.