Zero-day report: August 2023
CISA added 8 exploited vulnerabilities to its catalog in August 2023, 8 fewer than July (16). 3 were zero-days, listed within a week of going public. 3 are known to be used by ransomware. The most-hit vendor was Adobe, with 1.
By technology
Most-hit vendors
Every flaw added in August 2023
- Ignite Realtime · OpenfireIgnite Realtime Openfire Path Traversal Vulnerability
- RARLAB · WinRARRARLAB WinRAR Code Execution Vulnerability
- Veeam · Backup & ReplicationVeeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability
- Ivanti · SentryIvanti Sentry Authentication Bypass Vulnerability
- Adobe · ColdFusionAdobe ColdFusion Deserialization of Untrusted Data Vulnerability
- Citrix · Content CollaborationCitrix Content Collaboration ShareFile Improper Access Control Vulnerability
- Microsoft · .NET Core and Visual StudioMicrosoft .NET Core and Visual Studio Denial-of-Service Vulnerability
- Zyxel · P660HN-T1A RoutersZyxel P660HN-T1A Routers Command Injection Vulnerability
Source: CISA's Known Exploited Vulnerabilities catalog, by the date CISA added each flaw. Ransomware use is CISA's flag.