Exploit / PoCcritical
Advanced threat predictions for 2025
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-21338 | Local Privilege Escalation in Microsoft Windows Kernel via Exposed IOCTL (CVE-2024-21338) | 7.8 | 60% | KEVRansomwarePoC ×3 | KEV |
| CVE-2024-23222 | Apple WebKit Type Confusion Enables Arbitrary Code Execution Across iOS, macOS, tvOS | 8.8 | 11% | KEV | KEV |
CVE-2024-23225+1 related CVE | Memory Corruption Kernel Protection Bypass in Apple iOS, macOS, tvOS, visionOS | 7.8 | 1% | KEV | KEV |
| CVE-2024-43047 | Use-After-Free in Qualcomm FastConnect and QCA Chipset Firmware | 7.8 | <1% | KEV | KEV |
| CVE-2024-43093 | Local Privilege Escalation via Unicode Path Filter Bypass in Android Framework | 7.3 | <1% | KEV | KEV |
From the original article
13 min read at securelist.com
We at Kaspersky’s Global Research and Analysis Team monitor over 900 APT (advanced persistent threat) groups and operations. At the end of each year, we take a step back to assess the most complex and sophisticated attacks that have shaped the threat landscape. These insights enable us to anticipate emerging trends and build a clearer picture of what the APT landscape may look like in the year ahead.
By @Securelist · securelist.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.