Exploit / PoCcritical
2022 Zero-Day exploitation continues at a worrisome pace
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-1040 | Authentication Bypass Leading to Unauthenticated RCE in Sophos Firewall (SFOS) | 9.8 | 100% | KEVPoC ×2 | KEV |
| CVE-2022-24682 | Cross-Site Scripting in Synacor Zimbra Collaboration Suite Calendar | 6.1 | 31% | KEVRansomwarePoC | KEV |
| CVE-2022-26134 | Unauthenticated OGNL Injection RCE in Atlassian Confluence Server/Data Center | 9.8 | 100% | KEVRansomwarePoC ×2 | KEV |
| CVE-2022-27518 | Unauthenticated RCE/Authentication Bypass in Citrix ADC and Gateway | 9.8 | 7% | KEV | KEV |
| CVE-2022-30190 | MSDT URL Protocol Remote Code Execution in Microsoft Windows (Follina) | 7.8 | 99% | KEVRansomwarePoC | KEV |
| CVE-2022-41328 | Path Traversal in Fortinet FortiOS Exploited in Targeted Attacks | 7.1 | 11% | KEV | KEV |
| CVE-2022-42475 | Unauthenticated Heap Overflow in Fortinet FortiOS/FortiProxy SSL-VPN (Critical RCE) | 9.8 | 99% | KEVRansomwarePoC | KEV |
| CVE-2023-23397 | Zero-Click Elevation of Privilege in Microsoft Outlook (Forced NTLM Credential Leak) | 9.8 | 97% | KEV | KEV |
From the original article
2 min read at securityaffairs.com
Experts warn that 55 zero-day vulnerabilities were exploited in attacks carried out by ransomware and cyberespionage groups in 2022. Cybersecurity firm Mandiant reported that ransomware and cyberespionage groups exploited 55 zero-day flaws in attacks in the wild. Most of the zero-day vulnerabilities were in software from Microsoft, Google, and Apple.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.