Zero-day report: May 2022
CISA added 83 exploited vulnerabilities to its catalog in May 2022, 38 more than April (45). 4 were zero-days, listed within a week of going public. 18 are known to be used by ransomware. The most-hit vendor was Microsoft, with 37.
By technology
Most-hit vendors
Every flaw added in May 2022
- Red Hat · JBossRed Hat JBoss Authentication Bypass Vulnerability
- Oracle · Java Runtime Environment (JRE)Oracle JRE Unspecified Vulnerability
- Red Hat · JBossRed Hat JBoss Information Disclosure Vulnerability
- Oracle · Fusion MiddlewareOracle Fusion Middleware Unspecified Vulnerability
- Microsoft · SilverlightMicrosoft Silverlight Double Dereference Vulnerability
- Oracle · Java Runtime Environment (JRE)Oracle JRE Remote Code Execution Vulnerability
- Oracle · Java Runtime Environment (JRE)Oracle JRE Sandbox Bypass Vulnerability
- Oracle · Java Runtime Environment (JRE)Oracle JRE Unspecified Vulnerability
- Microsoft · SilverlightMicrosoft Silverlight Information Disclosure Vulnerability
- IBM · InfoSphere BigInsightsIBM InfoSphere BigInsights Invalid Input Vulnerability
- Microsoft · Internet ExplorerMicrosoft Internet Explorer Information Disclosure Vulnerability
- Adobe · Reader and AcrobatAdobe Reader and Acrobat Sandbox Bypass Vulnerability
- Microsoft · Internet ExplorerMicrosoft Internet Explorer Privilege Escalation Vulnerability
- Linux · KernelLinux Kernel Privilege Escalation Vulnerability
- Microsoft · Input Method Editor (IME) JapaneseMicrosoft IME Japanese Privilege Escalation Vulnerability
- Microsoft · Internet ExplorerMicrosoft Internet Explorer Privilege Escalation Vulnerability
- Microsoft · WindowsMicrosoft Windows Remote Code Execution Vulnerability
- Adobe · Flash PlayerAdobe Flash Player Dereferenced Pointer Vulnerability
- Microsoft · WindowsMicrosoft Windows TS WebProxy Directory Traversal Vulnerability
- Microsoft · Internet ExplorerMicrosoft Internet Explorer ASLR Bypass Vulnerability
- Adobe · Flash PlayerAdobe Flash Player ASLR Bypass Vulnerability
- Microsoft · WindowsMicrosoft Windows Remote Code Execution Vulnerability
- Microsoft · WindowsMicrosoft Windows Mount Manager Privilege Escalation Vulnerability
- Microsoft · Win32kMicrosoft Win32k Privilege Escalation Vulnerability
- Microsoft · Internet ExplorerMicrosoft Internet Explorer Memory Corruption Vulnerability
- Mozilla · FirefoxMozilla Firefox Security Feature Bypass Vulnerability
- Microsoft · WindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability
- Adobe · Flash PlayerAdobe Flash Player Integer Overflow Vulnerability
- Microsoft · SilverlightMicrosoft Silverlight Runtime Remote Code Execution Vulnerability
- Adobe · Flash Player and AIRAdobe Flash Player and AIR Use-After-Free Vulnerability
- Adobe · Flash Player and AIRAdobe Flash Player and AIR Integer Overflow Vulnerability
- Microsoft · WindowsMicrosoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability
- Microsoft · WindowsMicrosoft Windows Open Type Font Remote Code Execution Vulnerability
- Oracle · SolarisOracle Solaris Privilege Escalation Vulnerability
- Microsoft · Internet ExplorerMicrosoft Internet Explorer Information Disclosure Vulnerability
- Microsoft · Internet ExplorerMicrosoft Internet Explorer Messaging API Information Disclosure Vulnerability
- Microsoft · Internet Explorer and EdgeMicrosoft Internet Explorer and Edge Information Disclosure Vulnerability
- Apple · iOSApple iOS Information Disclosure Vulnerability
- Apple · iOSApple iOS Memory Corruption Vulnerability
- Apple · iOSApple iOS Webkit Memory Corruption Vulnerability
- Cisco · Adaptive Security Appliance (ASA)Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability
- Cisco · Adaptive Security Appliance (ASA)Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability
- Microsoft · WindowsMicrosoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability
- Microsoft · XML Core ServicesMicrosoft XML Core Services Information Disclosure Vulnerability
- Microsoft · SMBv1 serverMicrosoft Windows SMBv1 Information Disclosure Vulnerability
- Microsoft · Internet ExplorerMicrosoft Internet Explorer Memory Corruption Vulnerability
- Microsoft · Internet ExplorerMicrosoft Internet Explorer Privilege Escalation Vulnerability
- Kaseya · Virtual System/Server Administrator (VSA)Kaseya VSA SQL Injection Vulnerability
- Artifex · GhostscriptArtifex Ghostscript Type Confusion Vulnerability
- Microsoft · WindowsMicrosoft Windows Search Remote Code Execution Vulnerability
- QNAP · Network Attached Storage (NAS)QNAP NAS File Station Cross-Site Scripting Vulnerability
- QNAP · Network Attached Storage (NAS)QNAP NAS File Station Command Injection Vulnerability
- QNAP · Network Attached Storage (NAS)QNAP NAS File Station Cross-Site Scripting Vulnerability
- Microsoft · WindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability
- Adobe · Flash PlayerAdobe Flash Player Stack-based Buffer Overflow Vulnerability
- Microsoft · Win32kMicrosoft Win32k Privilege Escalation Vulnerability
- Microsoft · Internet ExplorerMicrosoft Internet Explorer Information Disclosure Vulnerability
- Microsoft · WindowsMicrosoft Windows SMB Information Disclosure Vulnerability
- Microsoft · WindowsMicrosoft Windows Privilege Escalation Vulnerability
- Microsoft · WindowsMicrosoft Windows AppX Deployment Service Privilege Escalation Vulnerability
- Mozilla · Firefox and ThunderbirdMozilla Firefox and Thunderbird Type Confusion Vulnerability
- Mozilla · Firefox and ThunderbirdMozilla Firefox and Thunderbird Sandbox Escape Vulnerability
- Google · Chrome WebAudioGoogle Chrome WebAudio Use-After-Free Vulnerability
- Microsoft · WindowsMicrosoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability
- Meta Platforms · WhatsAppWhatsApp Cross-Site Scripting Vulnerability
- Google · Chrome BlinkGoogle Chrome Blink Use-After-Free Vulnerability
- Apple · Multiple ProductsApple Multiple Products Memory Corruption Vulnerability
- Apple · iOSApple iOS Memory Corruption Vulnerability
- WebKitGTK · WebKitGTKWebKitGTK Memory Corruption Vulnerability
- Microsoft · Update Notification ManagerMicrosoft Update Notification Manager Privilege Escalation Vulnerability
- Microsoft · WindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability
- Android · KernelAndroid Kernel Race Condition Vulnerability
- Android · KernelAndroid Kernel Use-After-Free Vulnerability
- Apple · Multiple ProductsApple Multiple Products Memory Corruption Vulnerability
- Cisco · IOS XRCisco IOS XR Open Port Vulnerability
- VMware · Spring Cloud GatewayVMware Spring Cloud Gateway Code Injection Vulnerability
- Zyxel · Multiple FirewallsZyxel Multiple Firewalls OS Command Injection Vulnerability
- F5 · BIG-IPF5 BIG-IP Missing Authentication Vulnerability
- OpenSSL · OpenSSLOpenSSL Information Disclosure Vulnerability
- Microsoft · Internet ExplorerMicrosoft Internet Explorer Use-After-Free Vulnerability
- Microsoft · Win32kMicrosoft Win32k Privilege Escalation Vulnerability
- Apple · Multiple ProductsApple Multiple Products Type Confusion Vulnerability
- Apple · Multiple ProductsApple Multiple Products Type Confusion Vulnerability
Source: CISA's Known Exploited Vulnerabilities catalog, by the date CISA added each flaw. Ransomware use is CISA's flag.