Flaws added in October 2022
From Exploited flaws, HARD’s guide to the flaws being used in attacks
This article lists the flaws CISA added in October 2022. For the newest, see Exploited flaws.
In October 2022, CISA added 12 flaws to its list of vulnerabilities being used in attacks, 3 of them in things people have at home; 8 have been used by ransomware gangs. Most came from GIGABYTE (4), Cisco (2) and Google (1).[1]
Nine of the twelve let an attacker take over the product, running their own code or taking full control.
List of flaws
Every flaw CISA added in October 2022, newest first, in plain English, each with an article of its own.[2] marks the ones used in ransomware.
Show
1 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2022-3723At home |
Chrome and other Chromium browsers. A booby-trapped web page can corrupt memory in Chrome and other Chromium browsers, which attackers use to take it over. | At home |
1 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2022-42827At home |
Apple iOS and iPadOS. Attackers can run their own code on Apple iOS and iPadOS. | At home |
6 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2020-3433† Used in ransomwareAt work |
Cisco AnyConnect Secure. Someone who already has a way in can use Cisco AnyConnect Secure to run their own code. | At work |
CVE-2020-3153† Used in ransomwareAt work |
Cisco AnyConnect Secure. Attackers are using a flaw in Cisco AnyConnect Secure. | At work |
CVE-2018-19323† Used in ransomwareAt work |
GIGABYTE products. Someone who already has a foothold can use GIGABYTE products to take full control of the machine. | At work |
CVE-2018-19322† Used in ransomwareAt work |
GIGABYTE products. Attackers can run their own code on GIGABYTE products. | At work |
CVE-2018-19321† Used in ransomwareAt work |
GIGABYTE products. Someone who already has a foothold can use GIGABYTE products to take full control of the machine. | At work |
CVE-2018-19320† Used in ransomwareAt work |
GIGABYTE products. Attackers are using a flaw in GIGABYTE products that its maker hasn't described in detail. | At work |
2 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2022-41352† Used in ransomwareAt work |
Synacor Zimbra Collaboration Suite (ZCS). Attackers can upload a file to Synacor Zimbra Collaboration Suite (ZCS) and make it run. | At work |
CVE-2021-3493At work |
Linux Kernel. Someone who already has a foothold can use Linux Kernel to take full control of the machine. | At work |
2 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2022-41033At home |
Microsoft Windows COM+ Event System Service. Someone who already has a foothold can use Microsoft Windows COM+ Event System Service to take full control of the machine. | At home |
CVE-2022-40684† Used in ransomwareAt work |
Fortinet products. Attackers can get into Fortinet products without a valid password. | At work |
Companies
The flaws were in eight companies’ products; the most were in GIGABYTE’s (4).
Other months
Every month since CISA started the list; October 2022 is outlined.
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2026 | 17 | 28 | 26 | 31 | 21 | 23 | 26 | 31 | 43 | 36 | 282 | ||
| 2025 | 14 | 27 | 32 | 15 | 24 | 20 | 20 | 15 | 16 | 31 | 11 | 20 | 245 |
| 2024 | 21 | 9 | 10 | 10 | 14 | 9 | 14 | 19 | 25 | 17 | 22 | 16 | 186 |
| 2023 | 5 | 14 | 18 | 17 | 19 | 24 | 16 | 8 | 19 | 18 | 18 | 11 | 187 |
| 2022 | 40 | 32 | 226 | 45 | 83 | 48 | 3 | 23 | 24 | 12 | 10 | 9 | 555 |
| 2021 | 291 | 20 | 311 |
References
- ^ Cybersecurity and Infrastructure Security Agency. “Known Exploited Vulnerabilities Catalog”. Version 2026.10.30, updated 30 Oct 2026. CISA adds a flaw when it has reliable evidence of it being used in attacks; the date is when it was added, not when the attacks began.
- ^ HARD. Plain-English summaries written from CISA’s and NVD’s text, on each flaw’s page.
See also Exploited flaws, Companies, and Search for any app or company.