Flaws added in August 2022
From Exploited flaws, HARD’s guide to the flaws being used in attacks
This article lists the flaws CISA added in August 2022. For the newest, see Exploited flaws.
In August 2022, CISA added 23 flaws to its list of vulnerabilities being used in attacks, 7 of them in things people have at home; 6 have been used by ransomware gangs. Most came from Apple (3), Microsoft (3) and Synacor (3).[1]
Most let an attacker take over the product, running their own code or taking full control.
List of flaws
Every flaw CISA added in August 2022, newest first, in plain English, each with an article of its own.[2] marks the ones used in ransomware.
Show
10 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2022-26352† Used in ransomwareAt work |
dotCMS. Attackers can run their own code on dotCMS from anywhere, without logging in. | At work |
CVE-2022-24706At work |
Apache CouchDB. Someone who already has a foothold can use Apache CouchDB to take full control of the machine. | At work |
CVE-2022-24112At work |
Apache APISIX. Attackers can run their own code on Apache APISIX. | At work |
CVE-2022-22963At work |
VMware Tanzu Spring Cloud. Attackers can run their own code on VMware Tanzu Spring Cloud. | At work |
CVE-2022-2294† Used in ransomwareAt work |
WebRTC. A booby-trapped web page can run an attacker's code through WebRTC. | At work |
CVE-2021-39226At work |
Grafana Labs Grafana. Attackers can get into Grafana Labs Grafana without a valid password. | At work |
CVE-2021-38406At work |
Delta Electronics DOPSoft 2. Attackers can run their own code on Delta Electronics DOPSoft 2. | At work |
CVE-2021-31010At home |
Apple iOS, macOS, watchOS. Attackers are using a flaw in Apple iOS, macOS, watchOS. | At home |
CVE-2020-36193At work |
PEAR Archive_Tar. Attackers can read files on PEAR Archive_Tar that should be out of reach. | At work |
CVE-2020-28949At work |
PEAR Archive_Tar. Attackers can run their own code on PEAR Archive_Tar. | At work |
1 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2022-0028At work |
Palo Alto Networks PAN-OS. Attackers can crash Palo Alto Networks PAN-OS or stop it working. | At work |
7 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2022-32894At home |
Apple iOS and macOS. Attackers can run their own code on Apple iOS and macOS. | At home |
CVE-2022-32893At home |
Apple iOS and macOS. Attackers can run their own code on Apple iOS and macOS. | At home |
CVE-2022-2856At home |
Chrome and other Chromium browsers. Attackers are using a flaw in Chrome and other Chromium browsers. | At home |
CVE-2022-26923At work |
Microsoft Active Directory. Someone who already has a foothold can use Microsoft Active Directory to take full control of the machine. | At work |
CVE-2022-22536At work |
SAP products. Attackers are using a flaw in SAP products. | At work |
CVE-2022-21971At home |
Microsoft Windows. Attackers can run their own code on Microsoft Windows. | At home |
CVE-2017-15944At work |
Palo Alto Networks PAN-OS. Attackers can run their own code on Palo Alto Networks PAN-OS. | At work |
2 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2022-37042† Used in ransomwareAt work |
Synacor Zimbra Collaboration Suite (ZCS). Attackers can run their own code on Synacor Zimbra Collaboration Suite (ZCS) from anywhere, without logging in. | At work |
CVE-2022-27925† Used in ransomwareAt work |
Synacor Zimbra Collaboration Suite (ZCS). Attackers can run their own code on Synacor Zimbra Collaboration Suite (ZCS) from anywhere, without logging in. | At work |
2 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2022-34713At home |
Microsoft Windows. Attackers can run their own code on Microsoft Windows. | At home |
CVE-2022-30333† Used in ransomwareAt home |
UnRAR. Attackers can read files on UnRAR that should be out of reach. | At home |
1 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2022-27924† Used in ransomwareAt work |
Synacor Zimbra Collaboration Suite (ZCS). Attackers can run commands on Synacor Zimbra Collaboration Suite (ZCS) from anywhere, without logging in. | At work |
Companies
The flaws were in 14 companies’ products; the most were in Apple’s (3).
| Company | Flaws | Ransomware |
|---|---|---|
| Apple | 3 | – |
| Microsoft | 3 | – |
| Synacor | 3 | 3 |
| Apache | 2 | – |
| Palo Alto Networks | 2 | – |
| PEAR | 2 | – |
| Delta Electronics | 1 | – |
| dotCMS | 1 | 1 |
| 1 | – | |
| Grafana Labs | 1 | – |
| RARLAB | 1 | 1 |
| SAP | 1 | – |
| VMware Tanzu | 1 | – |
| WebRTC | 1 | 1 |
Other months
Every month since CISA started the list; August 2022 is outlined.
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2026 | 17 | 28 | 26 | 31 | 21 | 23 | 26 | 31 | 43 | 36 | 282 | ||
| 2025 | 14 | 27 | 32 | 15 | 24 | 20 | 20 | 15 | 16 | 31 | 11 | 20 | 245 |
| 2024 | 21 | 9 | 10 | 10 | 14 | 9 | 14 | 19 | 25 | 17 | 22 | 16 | 186 |
| 2023 | 5 | 14 | 18 | 17 | 19 | 24 | 16 | 8 | 19 | 18 | 18 | 11 | 187 |
| 2022 | 40 | 32 | 226 | 45 | 83 | 48 | 3 | 23 | 24 | 12 | 10 | 9 | 555 |
| 2021 | 291 | 20 | 311 |
References
- ^ Cybersecurity and Infrastructure Security Agency. “Known Exploited Vulnerabilities Catalog”. Version 2026.10.30, updated 30 Oct 2026. CISA adds a flaw when it has reliable evidence of it being used in attacks; the date is when it was added, not when the attacks began.
- ^ HARD. Plain-English summaries written from CISA’s and NVD’s text, on each flaw’s page.
See also Exploited flaws, Companies, and Search for any app or company.