Zero-day report: March 2023
CISA added 18 exploited vulnerabilities to its catalog in March 2023, 4 more than February (14). 5 were zero-days, listed within a week of going public. 2 are known to be used by ransomware. The most-hit vendor was Microsoft, with 3.
By technology
Most-hit vendors
Every flaw added in March 2023
- Microsoft · Internet ExplorerMicrosoft Internet Explorer Memory Corruption Vulnerability
- Samba · SambaSamba Remote Code Execution Vulnerability
- Apple · iOS, iPadOS, and macOSApple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability
- Arm · Mali Graphics Processing Unit (GPU)Arm Mali GPU Kernel Driver Unspecified Vulnerability
- Google · Chromium Network ServiceGoogle Chromium Network Service Use-After-Free Vulnerability
- Arm · Mali Graphics Processing Unit (GPU)Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
- Fortra · Cobalt StrikeFortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability
- Fortra · Cobalt StrikeFortra Cobalt Strike User Interface Remote Code Execution Vulnerability
- Linux · KernelLinux Kernel Use-After-Free Vulnerability
- Adobe · ColdFusionAdobe ColdFusion Deserialization of Untrusted Data Vulnerability
- Fortinet · FortiOSFortinet FortiOS Path Traversal Vulnerability
- Microsoft · OfficeMicrosoft Office Outlook Privilege Escalation Vulnerability
- Microsoft · WindowsMicrosoft Windows SmartScreen Security Feature Bypass Vulnerability
- Plex · Media ServerPlex Media Server Remote Code Execution Vulnerability
- XStream · XStreamXStream Remote Code Execution Vulnerability
- Zoho · ManageEngineZoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability
- Apache · SparkApache Spark Command Injection Vulnerability
- Teclib · GLPITeclib GLPI Remote Code Execution Vulnerability
Source: CISA's Known Exploited Vulnerabilities catalog, by the date CISA added each flaw. Ransomware use is CISA's flag.