CVE-2019-0797 Win 0Day exploited by FruitArmor, SandCat APT groups
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-8453 | Win32k Elevation of Privilege Flaw in Windows 7-10 and Windows Server (CVE-2018-8453) | 7.8 | 70% | KEVRansomwarePoC ×2 | KEV |
| CVE-2018-8589 | Local Privilege Escalation in Microsoft Windows Win32k (Windows 7 / Server 2008) | 7.8 | 3% | KEV | KEV |
| CVE-2018-8611 | Local Privilege Escalation in Microsoft Windows Kernel Exploited in the Wild | 7.8 | 4% | KEV | KEV |
CVE-2019-0808+1 related CVE | Local Privilege Escalation in Microsoft Win32k on Windows 7 and Server 2008 | 7.8 | 53% | KEVPoC | KEV |
| CVE-2019-5786 | Actively Exploited Use-After-Free in Google Chrome Blink | 6.5 | 61% | KEVPoC | KEV |
From the original article
2 min read at securityaffairs.com
One of the zero-day flaws ( CVE-2019-0797 ) patched this week by Microsoft has been exploited in targeted attacks by several threats groups, including FruityArmor and SandCat APT groups. This week, Microsoft released Patch Tuesday security updates for March 2019 that address 64 flaws, including two Windows zero-day vulnerabilities exploited in targeted attacks.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.