Ransomwarecritical
Adobe Flash Player flaws remain the most used by Exploit Kits
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2014-4113 | Local Privilege Escalation in Microsoft Win32k Kernel Component (CVE-2014-4113) | — | 87% | KEV | — KEV |
| CVE-2015-7645 | Arbitrary Code Execution in Adobe Flash Player via Crafted SWF Files | — | 65% | KEVRansomware | — KEV |
| CVE-2015-8651 | Integer Overflow in Adobe Flash Player Enables Remote Code Execution | — | 68% | KEV | — KEV |
| CVE-2016-0034 | Remote Code Execution via Crafted Website in Microsoft Silverlight 5 | 8.8 | 69% | KEVRansomware | KEV |
| CVE-2016-0189 | Memory Corruption RCE in Microsoft IE Scripting Engines (JScript/VBScript) | 7.5 | 94% | KEVRansomwarePoC | KEV |
| CVE-2016-1010 | Integer Overflow RCE in Adobe Flash Player and AIR | 8.8 | 19% | KEV | KEV |
| CVE-2016-1019 | Arbitrary code execution flaw in Adobe Flash Player, used in ransomware attacks | 9.8 | 22% | KEVRansomware | KEV |
| CVE-2016-4117 | Arbitrary Code Execution in Adobe Flash Player 21.0.0.226 and earlier | 9.8 | 94% | KEVRansomwarePoC | KEV |
From the original article
2 min read at securityaffairs.comExperts from the firm Recorded Future published a report on the most common vulnerabilities used by threat actors in the exploit kits. Recorded Future published an interesting report on the most common vulnerabilities used by threat actors in the exploit kits.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.