Zero-day report: September 2024
CISA added 25 exploited vulnerabilities to its catalog in September 2024, 6 more than August (19). 6 were zero-days, listed within a week of going public. 4 are known to be used by ransomware. The most-hit vendor was Microsoft, with 5.
By technology
Most-hit vendors
Every flaw added in September 2024
- SAP · Commerce CloudSAP Commerce Cloud Deserialization of Untrusted Data Vulnerability
- DrayTek · Multiple Vigor RoutersDrayTek Multiple Vigor Routers OS Command Injection Vulnerability
- D-Link · DIR-820 RouterD-Link DIR-820 Router OS Command Injection Vulnerability
- Ivanti · Virtual Traffic ManagerIvanti Virtual Traffic Manager Authentication Bypass Vulnerability
- Ivanti · Cloud Services Appliance (CSA)Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability
- Microsoft · SQL ServerMicrosoft SQL Server Reporting Services Remote Code Execution Vulnerability
- Oracle · WebLogic ServerOracle WebLogic Server Remote Code Execution Vulnerability
- Oracle · ADF FacesOracle ADF Faces Deserialization of Untrusted Data Vulnerability
- Apache · HugeGraph-ServerApache HugeGraph-Server Improper Access Control Vulnerability
- Adobe · Flash PlayerAdobe Flash Player Incorrect Default Permissions Vulnerability
- Adobe · Flash PlayerAdobe Flash Player Code Execution Vulnerability
- Adobe · Flash PlayerAdobe Flash Player Integer Underflow Vulnerablity
- Adobe · Flash PlayerAdobe Flash Player Double Free Vulnerablity
- Microsoft · WindowsMicrosoft Windows MSHTML Platform Spoofing Vulnerability
- Progress · WhatsUp GoldProgress WhatsUp Gold SQL Injection Vulnerability
- Ivanti · Cloud Services ApplianceIvanti Cloud Services Appliance OS Command Injection Vulnerability
- Microsoft · WindowsMicrosoft Windows Installer Improper Privilege Management Vulnerability
- Microsoft · WindowsMicrosoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability
- Microsoft · PublisherMicrosoft Publisher Protection Mechanism Failure Vulnerability
- ImageMagick · ImageMagickImageMagick Improper Input Validation Vulnerability
- Linux · KernelLinux Kernel PIE Stack Buffer Corruption Vulnerability
- SonicWall · SonicOSSonicWall SonicOS Improper Access Control Vulnerability
- DrayTek · VigorConnectDraytek VigorConnect Path Traversal Vulnerability
- DrayTek · VigorConnectDraytek VigorConnect Path Traversal Vulnerability
- Kingsoft · WPS OfficeKingsoft WPS Office Path Traversal Vulnerability
Source: CISA's Known Exploited Vulnerabilities catalog, by the date CISA added each flaw. Ransomware use is CISA's flag.