Record · corpus.blog/posts/01a0ca88-3748-7128-b8bb-8d08d5e644f9

The Ups and Downs of 0-days: A Year in Review of 0-days Exploited In-the-Wild in 2022

Google Security Blog · published 27 July 2023

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at security.googleblog.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 55
Words captured: 3,960

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://googleprojectzero.blogspot.com/2022/04/the-more-you-know-more-you-know-you.html

googleprojectzero.blogspot.com

https://googleprojectzero.blogspot.com/2021/02/deja-vu-lnerability.html

googleprojectzero.blogspot.com

https://googleprojectzero.blogspot.com/2020/07/detection-deficit-year-in-review-of-0.html

googleprojectzero.blogspot.com

https://googleprojectzero.blogspot.com/2022/06/2022-0-day-in-wild-exploitationso-far.html

googleprojectzero.blogspot.com

https://googleprojectzero.github.io/0days-in-the-wild/rca.html

googleprojectzero.github.io

https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/edit

docs.google.com

https://googleprojectzero.blogspot.com/2022/11/mind-the-gap.html

googleprojectzero.blogspot.com

https://securitylab.github.com/advisories/GHSL-2022-054_Arm_Mali/

securitylab.github.com

https://blog.google/threat-analysis-group/spyware-vendors-use-0-days-and-n-days-against-popular-platforms/

blog.google

https://source.android.com/docs/security/bulletin/2023-04-01

source.android.com

https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2019/CVE-2019-2215.html

googleprojectzero.github.io

https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-1048.html

googleprojectzero.github.io

Use-after-freedom: MiraclePtr Read at the source ↗

security.googleblog.com

https://docs.google.com/document/d/1FM4fQmIhEqPG8uGp5o9A-mnPB5BOeScZYpkHjo0KKA8/edit

docs.google.com

https://chromium.googlesource.com/chromium/src/+/99479f6b06f315efa35a9a5f8f6b9832db7276ac

chromium.googlesource.com

https://support.apple.com/en-us/HT212650

support.apple.com

WebAssembly and Back Again: Fine-Grained Sandboxing in Firefox 95 Read at the source ↗

hacks.mozilla.org

https://github.com/externalist/presentations/blob/master/2023%20Zer0con/Mobile%20Exploitation%2C%20the%20past%2C%20present%2C%20and%20future.pdf

github.com

Deep dive into a sophisticated zero-click iMessage exploit Read at the source ↗

googleprojectzero.blogspot.com

https://www.youtube.com/watch?v=ueLuIKjRTnY

youtube.com

https://github.com/maddiestone/ConPresentations/blob/master/FIRST2022.2022_0days_so_far.pdf

github.com

https://github.com/maddiestone/ConPresentations/blob/master/Zer0Con2023.YearInReview.pdf

github.com

https://www.youtube.com/watch?v=H03b0UaogVs

youtube.com

https://github.com/maddiestone/ConPresentations/blob/master/OffensiveCon2023.PrintSpooler.pdf

github.com

https://googleprojectzero.blogspot.com/2022/06/an-autopsy-on-zombie-in-wild-0-day.html

googleprojectzero.blogspot.com

https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-21882.html

googleprojectzero.github.io

https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-1732.html

googleprojectzero.github.io

https://support.apple.com/en-us/HT213053

support.apple.com

https://googleprojectzero.blogspot.com/2022/06/curious-case-carrier-app.html

googleprojectzero.blogspot.com

https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-22620.html

googleprojectzero.github.io

https://bugzilla.mozilla.org/show_bug.cgi?id=1758070&_gl=1*3y1al3*_ga*NzAwMDA4NTM5LjE2Nzg3MzM2Njk.*_ga_MQ7767QQQW*MTY4MDgwNTUzOS42LjAuMTY4MDgwNTUzOS4wLjAuMA..

bugzilla.mozilla.org

https://bugzilla.mozilla.org/show_bug.cgi?id=1725854

bugzilla.mozilla.org

https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-39793.html

googleprojectzero.github.io

https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities

developer.arm.com

https://news.sophos.com/en-us/2022/06/15/personal-panda/

news.sophos.com

https://www.tenable.com/blog/cve-2020-12271-zero-day-sql-injection-vulnerability-in-sophos-xg-firewall-exploited-in-the-wild

tenable.com

https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-1096.html

googleprojectzero.github.io

https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-30551.html

googleprojectzero.github.io

https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_14.html

chromereleases.googleblog.com

https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop_30.html

chromereleases.googleblog.com

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26925

msrc.microsoft.com

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36942

msrc.microsoft.com

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30190

msrc.microsoft.com

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-40444

msrc.microsoft.com

https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html

confluence.atlassian.com

https://confluence.atlassian.com/doc/confluence-security-advisory-2021-08-25-1077906215.html

confluence.atlassian.com

https://bugs.chromium.org/p/chromium/issues/detail?id=1345630

bugs.chromium.org

https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-38000.html

googleprojectzero.github.io

CVE-2022-41040 and CVE-2022-41082 – zero-days in MS Exchange Read at the source ↗

securelist.com

https://www.mandiant.com/resources/blog/pst-want-shell-proxyshell-exploiting-microsoft-exchange-servers

mandiant.com

https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-41128.html

googleprojectzero.github.io

https://bugs.chromium.org/p/project-zero/issues/detail?id=2188

bugs.chromium.org

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41073

msrc.microsoft.com

https://www.zerodayinitiative.com/blog/2023/1/23/activation-context-cache-poisoning-exploiting-csrss-for-privilege-escalation

zerodayinitiative.com

https://github.com/WebKit/WebKit/commit/46870df840545275ae1780f1d0b99f0e3db2116b

github.com