Q1 2022 Vulnerability Roundup

In Q1 2022 multiple critical vulnerabilities — notably Log4Shell, Spring4Shell, Dirty Pipe, and Chrome zero-days — were actively exploited by both criminal and nation-state actors (including APT41 and DPRK-linked groups); these exploits enabled remote code execution, privilege escalation, botnet recruitment (B1txor20, Mirai), and post-exploitation ransomware, highlighting an elevated threat environment that calls for prioritized, risk-based remediation.