Zero-day report: July 2022
CISA added 3 exploited vulnerabilities to its catalog in July 2022, 45 fewer than June (48). 1 was a zero-day, listed within a week of going public. The most-hit vendor was Microsoft, with 2.
By technology
Most-hit vendors
Every flaw added in July 2022
- Atlassian · ConfluenceAtlassian Questions For Confluence App Hard-coded Credentials Vulnerability
- Microsoft · WindowsMicrosoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability
- Microsoft · WindowsMicrosoft Windows LSA Spoofing Vulnerability
Source: CISA's Known Exploited Vulnerabilities catalog, by the date CISA added each flaw. Ransomware use is CISA's flag.