Zero-day report: August 2022
CISA added 23 exploited vulnerabilities to its catalog in August 2022, 20 more than July (3). 5 were zero-days, listed within a week of going public. 6 are known to be used by ransomware. The most-hit vendor was Apple, with 3.
By technology
Most-hit vendors
Every flaw added in August 2022
- PEAR · Archive_TarPEAR Archive_Tar Deserialization of Untrusted Data Vulnerability
- PEAR · Archive_TarPEAR Archive_Tar Improper Link Resolution Vulnerability
- Apple · iOS, macOS, watchOSApple iOS, macOS, watchOS Sandbox Bypass Vulnerability
- Delta Electronics · DOPSoft 2Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability
- Grafana Labs · GrafanaGrafana Authentication Bypass Vulnerability
- WebRTC · WebRTCWebRTC Heap Buffer Overflow Vulnerability
- VMware Tanzu · Spring CloudVMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability
- Apache · APISIXApache APISIX Authentication Bypass Vulnerability
- Apache · CouchDBApache CouchDB Insecure Default Initialization of Resource Vulnerability
- dotCMS · dotCMSdotCMS Unrestricted Upload of File Vulnerability
- Palo Alto Networks · PAN-OSPalo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability
- Palo Alto Networks · PAN-OSPalo Alto Networks PAN-OS Remote Code Execution Vulnerability
- Microsoft · WindowsMicrosoft Windows Runtime Remote Code Execution Vulnerability
- SAP · Multiple ProductsSAP Multiple Products HTTP Request Smuggling Vulnerability
- Microsoft · Active DirectoryMicrosoft Active Directory Domain Services Privilege Escalation Vulnerability
- Google · Chromium IntentsGoogle Chromium Intents Insufficient Input Validation Vulnerability
- Apple · iOS and macOSApple iOS and macOS Out-of-Bounds Write Vulnerability
- Apple · iOS and macOSApple iOS and macOS Out-of-Bounds Write Vulnerability
- Synacor · Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability
- Synacor · Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability
- RARLAB · UnRARRARLAB UnRAR Directory Traversal Vulnerability
- Microsoft · WindowsMicrosoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
- Synacor · Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability
Source: CISA's Known Exploited Vulnerabilities catalog, by the date CISA added each flaw. Ransomware use is CISA's flag.