Zero-day report: June 2022
CISA added 48 exploited vulnerabilities to its catalog in June 2022, 35 fewer than May (83). 1 was a zero-day, listed within a week of going public. 8 are known to be used by ransomware. The most-hit vendor was Adobe, with 13.
By technology
Most-hit vendors
Every flaw added in June 2022
- Apple · Multiple ProductsApple Multiple Products Memory Corruption Vulnerability
- Apple · Multiple ProductsApple Multiple Products Use-After-Free Vulnerability
- Apple · Multiple ProductsApple Multiple Products Memory Corruption Vulnerability
- Apple · Multiple ProductsApple Multiple Products Memory Corruption Vulnerability
- Google · Chromium PopupBlockerGoogle Chromium PopupBlocker Security Bypass Vulnerability
- Apple · iOS and iPadOSApple iOS and iPadOS Buffer Overflow Vulnerability
- Red Hat · PolkitRed Hat Polkit Out-of-Bounds Read and Write Vulnerability
- Mitel · MiVoice ConnectMitel MiVoice Connect Data Validation Vulnerability
- Microsoft · WindowsMicrosoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
- SAP · NetWeaverSAP NetWeaver SQL Injection Vulnerability
- SAP · NetWeaverSAP NetWeaver Information Disclosure Vulnerability
- SAP · NetWeaverSAP NetWeaver Unrestricted File Upload Vulnerability
- Microsoft · WordMicrosoft Word Malformed Object Pointer Vulnerability
- Adobe · Acrobat and ReaderAdobe Acrobat and Reader Buffer Overflow Vulnerability
- Adobe · Acrobat and ReaderAdobe Acrobat and Reader Unspecified Vulnerability
- Microsoft · OfficeMicrosoft Office Object Record Corruption Vulnerability
- Microsoft · OfficeMicrosoft Office Buffer Overflow Vulnerability
- Adobe · Acrobat and Reader, Flash PlayerAdobe Acrobat and Reader, Flash Player Unspecified Vulnerability
- Adobe · Acrobat and ReaderAdobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability
- Adobe · Acrobat and ReaderAdobe Acrobat and Reader Use-After-Free Vulnerability
- Adobe · Flash PlayerAdobe Flash Player Memory Corruption Vulnerability
- Microsoft · PowerPointMicrosoft PowerPoint Buffer Overflow Vulnerability
- Adobe · Acrobat and ReaderAdobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability
- Adobe · Flash PlayerAdobe Flash Player Unspecified Vulnerability
- Adobe · Reader and AcrobatAdobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability
- Microsoft · WindowsMicrosoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability
- Adobe · Flash PlayerAdobe Flash Player Memory Corruption Vulnerability
- Adobe · Flash PlayerAdobe Flash Player Cross-Site Scripting (XSS) Vulnerability
- Microsoft · XML Core ServicesMicrosoft XML Core Services Memory Corruption Vulnerability
- Microsoft · Internet ExplorerMicrosoft Internet Explorer Use-After-Free Vulnerability
- Adobe · Flash PlayerAdobe Flash Player Integer Overflow Vulnerability
- Microsoft · OfficeMicrosoft Office Buffer Overflow Vulnerability
- Google · Chromium V8Google Chromium V8 Out-of-Bounds Read Vulnerability
- Google · Chromium V8Google Chromium V8 Out-of-Bounds Memory Vulnerability
- Google · Chromium V8Google Chromium V8 Memory Corruption Vulnerability
- Google · Chromium V8Google Chromium V8 Type Confusion Vulnerability
- NETGEAR · Multiple DevicesNETGEAR Multiple Devices Buffer Overflow Vulnerability
- Google · Chromium V8Google Chromium V8 Remote Code Execution Vulnerability
- Google · Chromium V8Google Chromium V8 Out-of-Bounds Write Vulnerability
- Adobe · Acrobat and ReaderAdobe Acrobat and Reader Double Free Vulnerability
- Google · Chromium V8Google Chromium V8 Integer Overflow Vulnerability
- Cisco · RV Series RoutersCisco RV Series Routers Deserialization of Untrusted Data Vulnerability
- Google · Chromium V8Google Chromium V8 Out-of-Bounds Write Vulnerability
- QNAP · Photo StationQNAP Photo Station Improper Access Control Vulnerability
- QNAP · QTSQNAP QTS Improper Input Validation Vulnerability
- QNAP · Photo StationQNAP Photo Station Path Traversal Vulnerability
- QNAP · Photo StationQNAP Photo Station Path Traversal Vulnerability
- Atlassian · Confluence Server/Data CenterAtlassian Confluence Server and Data Center Remote Code Execution Vulnerability
Source: CISA's Known Exploited Vulnerabilities catalog, by the date CISA added each flaw. Ransomware use is CISA's flag.