RansomwarecriticalExploited in the wild

Week in review: Linux bug gives root access to attackers, UPS devices' vulns, IoT security for OEMs

Help Net Securityby @helpnetsecurityMar 13, 2022 · 00:00 UTC (Mar 13, 2022)5 min read2

Read at helpnetsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-26485 CVE-2022-26486 CVE-2022-0847

Tags: cve-2022-26485 cve-2022-26486 cve-2022-0847 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-0847	Local Privilege Escalation ('Dirty Pipe') in the Linux Kernel	7.8	93%	KEVPoC ×4	Mar 10, 2022 KEV Apr 25, 2022
CVE-2022-26486 +1 related CVE CVE-2022-26485	Use-After-Free Sandbox Escape in Mozilla Firefox and Thunderbird	9.6 group max	2%	KEVPoC ×2	Dec 22, 2022 KEV Mar 7, 2022

From the original article

5 min read at helpnetsecurity.com

Here’s an overview of some of last week’s most interesting news, articles and interviews: Mozilla fixes Firefox zero-days exploited in the wild (CVE-2022-26485, CVE-2022-26486) Mozilla has released an out-of-band security update for Firefox, Firefox Focus, and Thunderbird, fixing two critical vulnerabilities (CVE-2022-26485, CVE-2022-26486) exploited by attackers in the wild.

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.