Q2 2022 Vulnerability Roundup

ReliaQuest's Q2 2022 vulnerability report summarizes trends in exploited vulnerabilities, noting privilege escalation was the most common exploit type (48% of incidents). The report highlights continued widespread targeting of Log4Shell and active exploitation of the Follina MSDT zero-day (CVE-2022-30190) by Russia-linked APTs (Sandworm, Fancy Bear), mentions other high-profile CVEs (ProxyLogon, BlueKeep, Spring4Shell bypass), and recommends moving from CVSS-focused remediation to a risk-based vulnerability management approach.