Flaws added in July 2023
From Exploited flaws, HARD’s guide to the flaws being used in attacks
This article lists the flaws CISA added in July 2023. For the newest, see Exploited flaws.
In July 2023, CISA added 16 flaws to its list of vulnerabilities being used in attacks, 8 of them in things people have at home; 4 have been used by ransomware gangs. Most came from Microsoft (5), Ivanti (2) and Apple (2).[1]
About half let an attacker take over the product, running their own code or taking full control.
List of flaws
Every flaw CISA added in July 2023, newest first, in plain English, each with an article of its own.[2] marks the ones used in ransomware.
Show
1 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2023-35081At work |
Ivanti Endpoint Manager Mobile (EPMM). Attackers can get into Ivanti Endpoint Manager Mobile (EPMM) without a valid password. | At work |
1 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2023-37580At work |
Synacor Zimbra Collaboration Suite (ZCS). Attackers can run code in the browser of someone using Synacor Zimbra Collaboration Suite (ZCS) and act as them. | At work |
1 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2023-38606At home |
Apple devices. Attackers are using a flaw in Apple devices that its maker hasn't described in detail. | At home |
1 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2023-35078† Used in ransomwareAt work |
Ivanti Endpoint Manager Mobile (EPMM). Attackers can get into Ivanti Endpoint Manager Mobile (EPMM) without a valid password. | At work |
2 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2023-38205At work |
Adobe ColdFusion. Attackers can reach parts of Adobe ColdFusion that should be locked to them. | At work |
CVE-2023-29298At work |
Adobe ColdFusion. Attackers can reach parts of Adobe ColdFusion that should be locked to them. | At work |
1 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2023-3519† Used in ransomwareAt work |
Citrix NetScaler ADC and NetScaler Gateway. Attackers can run their own code on Citrix NetScaler ADC and NetScaler Gateway from anywhere, without logging in. | At work |
1 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2023-36884† Used in ransomwareAt home |
Microsoft Windows. Opening a booby-trapped file can let an attacker run their own code through Microsoft Windows. | At home |
2 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2023-37450At home |
Apple devices. Attackers can run their own code on Apple devices. | At home |
CVE-2022-29303At work |
SolarView Compact. Attackers can run commands on SolarView Compact. | At work |
5 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2023-36874At home |
Microsoft Windows. Someone who already has a foothold can use Microsoft Windows to take full control of the machine. | At home |
CVE-2023-35311At home |
Microsoft Outlook. Attackers can get past a security protection in Microsoft Outlook. | At home |
CVE-2023-32049At home |
Microsoft Windows. Attackers can get past a security protection in Microsoft Windows. | At home |
CVE-2023-32046At home |
Microsoft Windows. Someone who already has a foothold can use Microsoft Windows to take full control of the machine. | At home |
CVE-2022-31199† Used in ransomwareAt work |
Netwrix Auditor. Attackers can run their own code on Netwrix Auditor from anywhere, without logging in. | At work |
1 added
| CVE | Flaw | Found |
|---|---|---|
CVE-2021-29256At home |
Arm Mali Graphics Processing Unit (GPU). Someone who already has a foothold can use Arm Mali Graphics Processing Unit (GPU) to take full control of the machine. | At home |
Companies
The flaws were in nine companies’ products; the most were in Microsoft’s (5).
Other months
Every month since CISA started the list; July 2023 is outlined.
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2026 | 17 | 28 | 26 | 31 | 21 | 23 | 26 | 31 | 43 | 36 | 282 | ||
| 2025 | 14 | 27 | 32 | 15 | 24 | 20 | 20 | 15 | 16 | 31 | 11 | 20 | 245 |
| 2024 | 21 | 9 | 10 | 10 | 14 | 9 | 14 | 19 | 25 | 17 | 22 | 16 | 186 |
| 2023 | 5 | 14 | 18 | 17 | 19 | 24 | 16 | 8 | 19 | 18 | 18 | 11 | 187 |
| 2022 | 40 | 32 | 226 | 45 | 83 | 48 | 3 | 23 | 24 | 12 | 10 | 9 | 555 |
| 2021 | 291 | 20 | 311 |
References
- ^ Cybersecurity and Infrastructure Security Agency. “Known Exploited Vulnerabilities Catalog”. Version 2026.10.30, updated 30 Oct 2026. CISA adds a flaw when it has reliable evidence of it being used in attacks; the date is when it was added, not when the attacks began.
- ^ HARD. Plain-English summaries written from CISA’s and NVD’s text, on each flaw’s page.
See also Exploited flaws, Companies, and Search for any app or company.