Zero-day report: May 2023
CISA added 19 exploited vulnerabilities to its catalog in May 2023, 2 more than April (17). 5 were zero-days, listed within a week of going public. 1 is known to be used by ransomware. The most-hit vendor was Apple, with 3.
By technology
Most-hit vendors
Every flaw added in May 2023
- Zyxel · Multiple FirewallsZyxel Multiple Firewalls OS Command Injection Vulnerability
- Barracuda Networks · Email Security Gateway (ESG) ApplianceBarracuda Networks ESG Appliance Improper Input Validation Vulnerability
- Apple · Multiple ProductsApple Multiple Products WebKit Out-of-Bounds Read Vulnerability
- Apple · Multiple ProductsApple Multiple Products WebKit Use-After-Free Vulnerability
- Apple · Multiple ProductsApple Multiple Products WebKit Sandbox Escape Vulnerability
- Cisco · IOSCisco IOS Denial-of-Service Vulnerability
- Cisco · IOS, IOS XR, and IOS XECisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability
- Samsung · Mobile DevicesSamsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability
- Linux · KernelLinux Kernel Improper Input Validation Vulnerability
- Linux · KernelLinux Kernel Race Condition Vulnerability
- Jenkins · Jenkins User Interface (UI)Jenkins User Interface (UI) Information Disclosure Vulnerability
- Oracle · Java SE and JRockitOracle Java SE and JRockit Unspecified Vulnerability
- Apache · TomcatApache Tomcat Remote Code Execution Vulnerability
- Red Hat · PolkitRed Hat Polkit Incorrect Authorization Vulnerability
- Ruckus Wireless · Multiple ProductsMultiple Ruckus Wireless Products CSRF and RCE Vulnerability
- Microsoft · Win32kMicrosoft Win32K Privilege Escalation Vulnerability
- Apache · Log4j2Apache Log4j2 Deserialization of Untrusted Data Vulnerability
- TP-Link · Archer AX21TP-Link Archer AX-21 Command Injection Vulnerability
- Oracle · WebLogic ServerOracle WebLogic Server Unspecified Vulnerability
Source: CISA's Known Exploited Vulnerabilities catalog, by the date CISA added each flaw. Ransomware use is CISA's flag.