Zero-day report: September 2022
CISA added 24 exploited vulnerabilities to its catalog in September 2022, 1 more than August (23). 8 were zero-days, listed within a week of going public. 6 are known to be used by ransomware. The most-hit vendor was Microsoft, with 4.
By technology
Most-hit vendors
Every flaw added in September 2022
- Atlassian · Bitbucket Server and Data CenterAtlassian Bitbucket Server and Data Center Command Injection Vulnerability
- Microsoft · Exchange ServerMicrosoft Exchange Server Server-Side Request Forgery Vulnerability
- Microsoft · Exchange ServerMicrosoft Exchange Server Remote Code Execution Vulnerability
- Sophos · FirewallSophos Firewall Code Injection Vulnerability
- Zoho · ManageEngineZoho ManageEngine Multiple Products Remote Code Execution Vulnerability
- Microsoft · WindowsMicrosoft Windows Remote Code Execution Vulnerability
- Linux · KernelLinux Kernel Privilege Escalation Vulnerability
- Linux · KernelLinux Kernel Integer Overflow Vulnerability
- Code Aurora · ACDB Audio DriverCode Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability
- Linux · KernelLinux Kernel Improper Input Validation Vulnerability
- Trend Micro · Apex One and Apex One as a ServiceTrend Micro Apex One and Apex One as a Service Improper Validation Vulnerability
- Apple · iOS, iPadOS, and macOSApple iOS, iPadOS, and macOS Remote Code Execution Vulnerability
- Microsoft · WindowsMicrosoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
- Android · Android OSAndroid OS Privilege Escalation Vulnerability
- D-Link · DIR-300 RouterD-Link DIR-300 Router Cleartext Storage of a Password Vulnerability
- NETGEAR · Multiple DevicesNETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability
- Fortinet · FortiOS and FortiADCFortinet FortiOS and FortiADC Improper Access Control Vulnerability
- Oracle · WebLogic ServerOracle WebLogic Server Unspecified Vulnerability
- D-Link · Multiple RoutersD-Link Multiple Routers OS Command Injection Vulnerability
- MikroTik · RouterOSMikroTik RouterOS Stack-Based Buffer Overflow Vulnerability
- Apple · iOS, iPadOS, and macOSApple iOS, iPadOS, and macOS Input Validation Vulnerability
- D-Link · DIR-820LD-Link DIR-820L Remote Code Execution Vulnerability
- QNAP · Photo StationQNAP Photo Station Externally Controlled Reference Vulnerability
- Google · Chromium MojoGoogle Chromium Mojo Insufficient Data Validation Vulnerability
Source: CISA's Known Exploited Vulnerabilities catalog, by the date CISA added each flaw. Ransomware use is CISA's flag.