Q3 2022 Vulnerability Roundup

ReliaQuest’s Q3 2022 vulnerability intelligence roundup reports that remote code execution (RCE) vulnerabilities dominated observed exploitation (48%), discusses high-profile and longstanding flaws (e.g., CVE-2017-11882, Follina CVE-2022-30190, CVE-2022-2294), documents targeted campaigns (Chrome/WebRTC exploit chained to sandbox escape deploying DevilsTongue by Candiru; Exchange ProxyNotShell CVEs used to install Chopper webshell and later leveraged to deploy LockBit ransomware), and emphasizes the need for threat-informed vulnerability management.