Zero-day report: October 2022
CISA added 12 exploited vulnerabilities to its catalog in October 2022, 12 fewer than September (24). 4 were zero-days, listed within a week of going public. 8 are known to be used by ransomware. The most-hit vendor was GIGABYTE, with 4.
By technology
Most-hit vendors
Every flaw added in October 2022
- Google · Chromium V8Google Chromium V8 Type Confusion Vulnerability
- Apple · iOS and iPadOSApple iOS and iPadOS Out-of-Bounds Write Vulnerability
- GIGABYTE · Multiple ProductsGIGABYTE Multiple Products Unspecified Vulnerability
- GIGABYTE · Multiple ProductsGIGABYTE Multiple Products Privilege Escalation Vulnerability
- GIGABYTE · Multiple ProductsGIGABYTE Multiple Products Code Execution Vulnerability
- GIGABYTE · Multiple ProductsGIGABYTE Multiple Products Privilege Escalation Vulnerability
- Cisco · AnyConnect SecureCisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability
- Cisco · AnyConnect SecureCisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability
- Linux · KernelLinux Kernel Privilege Escalation Vulnerability
- Synacor · Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability
- Fortinet · Multiple ProductsFortinet Multiple Products Authentication Bypass Vulnerability
- Microsoft · Windows COM+ Event System ServiceMicrosoft Windows COM+ Event System Service Privilege Escalation Vulnerability
← September 2022November 2022 →
Source: CISA's Known Exploited Vulnerabilities catalog, by the date CISA added each flaw. Ransomware use is CISA's flag.