Part 1: An In-Depth Look at the Latest Vulnerability Threat Landscape | Qualys
Summary: Qualys reports that the National Vulnerability Database holds 206,000 vulnerabilities and counting, with 14,205 reported in 2023 alone, and that over 80% of high-risk CVEs carry a Network access vector and over 80% require no authentication to exploit. The vendor's analysis also finds buffer overflow the most common weakness among high-risk vulnerabilities and names Initial Access, Lateral Movement, and Privilege Escalation as the top three MITRE ATT&CK tactics they enable.
Why it matters: Qualys notes that CVE-2021-42298 in Microsoft Defender is reportedly exploited by the Varison group but is absent from CISA's KEV catalog, so a remediation queue built only on that list leaves known exploited vulnerabilities unaddressed.
Read the original at Qualys Blog ↗
- Topics
- Threat Actors & Nation-State
- Mentions
- CVE-2023-3079
- Related
- CVE-2023-3079: Google Chromium V8 Type Confusion Vulnerability Known Exploited Vulnerabilities · Jun 07, 2023University of Texas at Arlington warns personal information stolen during cyberattack Cyber Risks · Nov 13, 2026Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files Cyber Risks · Nov 13, 2026