Zero-day report: July 2024
CISA added 14 exploited vulnerabilities to its catalog in July 2024, 5 more than June (9). 4 were zero-days, listed within a week of going public. 2 are known to be used by ransomware. The most-hit vendor was Microsoft, with 3.
By technology
Most-hit vendors
Every flaw added in July 2024
- VMware · ESXiVMware ESXi Authentication Bypass Vulnerability
- Acronis · Cyber Infrastructure (ACI)Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability
- ServiceNow · Utah, Vancouver, and Washington DC Now PlatformServiceNow Improper Input Validation Vulnerability
- ServiceNow · Utah, Vancouver, and Washington DC Now PlatformServiceNow Incomplete List of Disallowed Inputs Vulnerability
- Microsoft · Internet ExplorerMicrosoft Internet Explorer Use-After-Free Vulnerability
- Twilio · AuthyTwilio Authy Information Disclosure Vulnerability
- VMware · vCenter ServerVMware vCenter Server Incorrect Default File Permissions Vulnerability
- SolarWinds · Serv-USolarWinds Serv-U Path Traversal Vulnerability
- Adobe · Commerce and Magento Open SourceAdobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability
- OSGeo · GeoServerOSGeo GeoServer GeoTools Eval Injection Vulnerability
- Rejetto · HTTP File ServerRejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
- Microsoft · Windows Microsoft Windows Hyper-V Privilege Escalation Vulnerability
- Microsoft · WindowsMicrosoft Windows MSHTML Platform Spoofing Vulnerability
- Cisco · NX-OSCisco NX-OS Command Injection Vulnerability
Source: CISA's Known Exploited Vulnerabilities catalog, by the date CISA added each flaw. Ransomware use is CISA's flag.