Malwarecritical

Global Coalition and Tech Giants Unite Against Commercial Spyware Abuse

The Hacker Newsby @TheHackersNewsFeb 8, 2024 · 03:08 UTC (Feb 8, 2024)4 min read3 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-28205 CVE-2023-28206 CVE-2023-32409 CVE-2023-33063 CVE-2023-2033 CVE-2023-2136 CVE-2023-3079 CVE-2023-41061 CVE-2023-41064 CVE-2023-41991 CVE-2023-41992 CVE-2023-41993 CVE-2023-5217 CVE-2023-4211 CVE-2023-33106 CVE-2023-33107 CVE-2023-42916 CVE-2023-42917 CVE-2023-7024

Tags: cve-2023-28205 cve-2023-28206 cve-2023-32409 cve-2023-33063 cve-2023-2033 malware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-2033	Type Confusion in Google Chromium V8 Engine Exploited in the Wild	8.8	41%	KEV	Apr 14, 2023 KEV Apr 17, 2023
CVE-2023-2136	Skia Integer Overflow Sandbox Escape in Google Chrome	9.6	6%	KEV	Apr 19, 2023 KEV Apr 21, 2023
CVE-2023-28205	Use-After-Free in Apple WebKit (iOS, iPadOS, macOS, Safari) Enables Code Execution	8.8	27%	KEV	Apr 10, 2023 KEV Apr 10, 2023
CVE-2023-28206	Out-of-Bounds Write in Apple IOSurfaceAccelerator Allows Kernel-Level Code Execution	8.6	23%	KEV	Apr 10, 2023 KEV Apr 10, 2023
CVE-2023-3079	Type Confusion in Google Chromium V8 Engine Exploited in the Wild	8.8	38%	KEVPoC	Jun 5, 2023 KEV Jun 7, 2023
CVE-2023-32409	WebKit Sandbox Escape in Apple Safari, iOS, iPadOS, macOS, tvOS, and watchOS	8.6	17%	KEV	Jun 23, 2023 KEV May 22, 2023
CVE-2023-33106 +2 related CVEs CVE-2023-33107 CVE-2023-33063	Out-of-Range Pointer Memory Corruption in Qualcomm KGSL GPU Driver (Actively Exploited)	7.8	<1%	KEV	Dec 5, 2023 KEV Dec 5, 2023
CVE-2023-41061	Actively Exploited Wallet Flaw Enables Code Execution on Apple iOS, iPadOS, watchOS	7.8	4%	KEV	Sep 7, 2023 KEV Sep 11, 2023
CVE-2023-41064	ImageIO Buffer Overflow in Apple iOS, iPadOS, and macOS Allows Code Execution	7.8	53%	KEV	Sep 7, 2023 KEV Sep 11, 2023
CVE-2023-41993 +2 related CVEs CVE-2023-41992 CVE-2023-41991	WebKit Code Execution Flaw in Apple iOS, iPadOS, macOS, and Safari	8.8 group max	24%	KEV	Sep 21, 2023 KEV Sep 25, 2023
CVE-2023-4211	Use-After-Free in Arm Mali GPU Kernel Driver (Actively Exploited)	5.5	1%	KEV	Oct 1, 2023 KEV Oct 3, 2023
CVE-2023-42917 +1 related CVE CVE-2023-42916	WebKit Memory Corruption in Apple iOS, macOS, and Safari Enables Arbitrary Code Execution	8.8 group max	9%	KEV	Nov 30, 2023 KEV Dec 4, 2023
CVE-2023-5217	Heap Buffer Overflow in Google Chromium libvpx (CVE-2023-5217) Added to CISA KEV	8.8	49%	KEVPoC	Sep 28, 2023 KEV Oct 2, 2023
CVE-2023-7024	Actively Exploited Heap Buffer Overflow in Google Chrome WebRTC (CVE-2023-7024)	8.8	7%	KEVPoC	Dec 21, 2023 KEV Jan 2, 2024

From the original article

4 min read at thehackernews.com

A coalition of dozens of countries, including France, the U. K. , and the U.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.