Vulnerabilityhigh

Which vulnerabilities were most exploited by cybercriminals in 2019?

Help Net Securityby @zeljkazorzFeb 6, 2020 · 00:00 UTC (Feb 6, 2020)1 min read1 · 1 read

Read at helpnetsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2018-15982 CVE-2018-8174 CVE-2017-11882 CVE-2018-4878 CVE-2019-0752 CVE-2017-0199 CVE-2015-2419 CVE-2018-20250 CVE-2017-8750 CVE-2012-0158 CVE-2019-0841 CVE-2019-3396

Tags: cve-2018-15982 cve-2018-8174 cve-2017-11882 cve-2018-4878 cve-2019-0752 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2012-0158	Remote Code Execution in Microsoft MSCOMCTL.OCX (Windows Common Controls)	—	100%	KEVRansomware	— KEV Nov 3, 2021
CVE-2015-2419	Memory Corruption RCE in Microsoft Internet Explorer JScript Engine	—	53%	KEV	— KEV Mar 28, 2022
CVE-2017-0199	Remote Code Execution in Microsoft Office and WordPad via crafted document files	7.8	99%	KEVRansomwarePoC ×6	Apr 12, 2017 KEV Nov 3, 2021
CVE-2017-11882	Memory Corruption RCE in Microsoft Office via Legacy Equation Editor	7.8	100%	KEVRansomwarePoC ×10	Nov 15, 2017 KEV Nov 3, 2021
CVE-2017-8750	Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft Edge and…	7.5	9%		Sep 13, 2017
CVE-2018-15982	Use-After-Free in Adobe Flash Player Allows Arbitrary Code Execution	7.8	90%	KEVRansomwarePoC	Jan 18, 2019 KEV Feb 15, 2022
CVE-2018-20250	Absolute Path Traversal in RARLAB WinRAR ACE Extraction (UNACEV2.dll)	7.8	96%	KEVRansomwarePoC ×5	Feb 5, 2019 KEV Feb 15, 2022
CVE-2018-4878	Use-After-Free RCE in Adobe Flash Player before 28.0.0.161	7.8	90%	KEVRansomwarePoC ×2	Feb 6, 2018 KEV Nov 3, 2021
CVE-2018-8174	Out-of-Bounds Write RCE in Microsoft Windows VBScript Engine	7.5	88%	KEVRansomwarePoC ×2	May 9, 2018 KEV Feb 15, 2022
CVE-2019-0752	Type Confusion RCE in Microsoft Internet Explorer Scripting Engine	7.5	82%	KEVRansomwarePoC	Apr 9, 2019 KEV Feb 15, 2022
CVE-2019-0841	Local Privilege Escalation via Hard-Link Flaw in Windows AppX Deployment Service	7.8	41%	KEVRansomwarePoC ×2	Apr 9, 2019 KEV Mar 15, 2022
CVE-2019-3396	Server-Side Template Injection RCE in Atlassian Confluence Server and Data Center	9.8	100%	KEVRansomwarePoC ×4	Mar 25, 2019 KEV Nov 3, 2021

From the original article

1 min read at helpnetsecurity.com

Which ten software vulnerabilities should you patch as soon as possible (if you haven’t already)?

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.