Vulnerabilitycritical
Microsoft patches two zero-days exploited by FruityArmor, SandCat hacking groups
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2019-0808+1 related CVE | Local Privilege Escalation in Microsoft Win32k on Windows 7 and Server 2008 | 7.8 | 53% | KEVPoC | KEV |
From the original article
2 min read at cyberscoop.com
Both bugs are known as elevation of privilege vulnerabilities, and could allow outsiders to manipulate Windows machines into authorizing an action that should not be allowed. Microsoft has released security updates for two vulnerabilities that researchers say have been exploited by suspected nation-state hacking groups dubbed FruityArmor and SandCat.
By @jeffstone500 · cyberscoop.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.