2022 0-day In-the-Wild Exploitation…so far

Summary: Google Project Zero reported that as of June 15, 2022, there had been 18 0-days detected and disclosed as exploited in the wild in 2022, and that at least nine of them are variants of previously patched vulnerabilities. Four of the 2022 0-days are variants of 2021 in-the-wild 0-days, including Windows win32k CVE-2022-21882 as a variant of CVE-2021-1732 and Windows CVE-2022-30190 ("Follina") as a variant of CVE-2021-40444.
What's compelling: At least half of the 0-days seen in the first six months of 2022 could have been prevented with more comprehensive patching and regression tests, and in cases like WebKit CVE-2022-22620 and Windows PetitPotam CVE-2022-26925 a previously patched vulnerability regressed so attackers could exploit it again.

Read the original at Google Project Zero ↗