Flaws added in April 2023
From Exploited flaws, HARD’s guide to the flaws being used in attacks
This article lists the flaws CISA added in April 2023. For the newest, see Exploited flaws.
In April 2023, CISA added 17 flaws to its list of vulnerabilities being used in attacks, 9 of them in things people have at home; 6 have been used by ransomware gangs. Most came from Apple (3), Veritas (3) and Google (2).[1]
Most let an attacker take over the product, running their own code or taking full control.
List of flaws
Every flaw CISA added in April 2023, newest first, in plain English, each with an article of its own.[2] marks the ones used in ransomware.
Show
3 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2023-28432At work |
MinIO. Attackers can read information from MinIO that should be private. | At work |
CVE-2023-27350† Used in ransomwareAt work |
PaperCut MF/NG. Attackers can run their own code on PaperCut MF/NG. | At work |
CVE-2023-2136At home |
Chrome and other Chromium browsers. Attackers can get past a security protection in Chrome and other Chromium browsers. | At home |
1 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2017-6742At work |
Cisco IOS and IOS XE Software. Attackers can run their own code on Cisco IOS and IOS XE Software. | At work |
2 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2023-2033At home |
Chrome and other Chromium browsers. A booby-trapped web page can corrupt memory in Chrome and other Chromium browsers, which attackers use to take it over. | At home |
CVE-2019-8526At home |
Apple macOS. Someone who already has a foothold can use Apple macOS to take full control of the machine. | At home |
2 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2023-29492At work |
Novi Survey. Attackers can run their own code on Novi Survey. | At work |
CVE-2023-20963At home |
Android Framework. Someone who already has a foothold can use Android Framework to take full control of the machine. | At home |
1 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2023-28252† Used in ransomwareAt home |
Microsoft Windows. Someone who already has a foothold can use Microsoft Windows to take full control of the machine. | At home |
2 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2023-28206At home |
Apple iOS, iPadOS, and macOS. Attackers can run their own code on Apple iOS, iPadOS, and macOS. | At home |
CVE-2023-28205At home |
Apple devices. Attackers can run their own code on Apple devices. | At home |
5 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2023-26083At home |
Arm Mali Graphics Processing Unit (GPU). Attackers can read information from Arm Mali Graphics Processing Unit (GPU) that should be private. | At home |
CVE-2021-27878† Used in ransomwareAt work |
Veritas Backup Exec Agent. Attackers are using a flaw in Veritas Backup Exec Agent. | At work |
CVE-2021-27877† Used in ransomwareAt work |
Veritas Backup Exec Agent. Attackers can get into Veritas Backup Exec Agent without a valid password. | At work |
CVE-2021-27876† Used in ransomwareAt work |
Veritas Backup Exec Agent. Attackers are using a flaw in Veritas Backup Exec Agent. | At work |
CVE-2019-1388† Used in ransomwareAt home |
Microsoft Windows. Someone who already has a foothold can use Microsoft Windows to take full control of the machine. | At home |
1 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2022-27926At work |
Synacor Zimbra Collaboration Suite (ZCS). Attackers can run code in the browser of someone using Synacor Zimbra Collaboration Suite (ZCS) and act as them. | At work |
Companies
The flaws were in eleven companies’ products; the most were in Apple’s (3).
| Company | Flaws | Ransomware |
|---|---|---|
| Apple | 3 | – |
| Veritas | 3 | 3 |
| 2 | – | |
| Microsoft | 2 | 2 |
| Android | 1 | – |
| Arm | 1 | – |
| Cisco | 1 | – |
| MinIO | 1 | – |
| Novi Survey | 1 | – |
| PaperCut | 1 | 1 |
| Synacor | 1 | – |
Other months
Every month since CISA started the list; April 2023 is outlined.
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2026 | 17 | 28 | 26 | 31 | 21 | 23 | 26 | 31 | 43 | 36 | 282 | ||
| 2025 | 14 | 27 | 32 | 15 | 24 | 20 | 20 | 15 | 16 | 31 | 11 | 20 | 245 |
| 2024 | 21 | 9 | 10 | 10 | 14 | 9 | 14 | 19 | 25 | 17 | 22 | 16 | 186 |
| 2023 | 5 | 14 | 18 | 17 | 19 | 24 | 16 | 8 | 19 | 18 | 18 | 11 | 187 |
| 2022 | 40 | 32 | 226 | 45 | 83 | 48 | 3 | 23 | 24 | 12 | 10 | 9 | 555 |
| 2021 | 291 | 20 | 311 |
References
- ^ Cybersecurity and Infrastructure Security Agency. “Known Exploited Vulnerabilities Catalog”. Version 2026.10.30, updated 30 Oct 2026. CISA adds a flaw when it has reliable evidence of it being used in attacks; the date is when it was added, not when the attacks began.
- ^ HARD. Plain-English summaries written from CISA’s and NVD’s text, on each flaw’s page.
See also Exploited flaws, Companies, and Search for any app or company.