Exploit / PoChighExploited in the wild

CISA adds Veritas Backup Exec flaws to its Known Exploited Vulnerabilities catalog

Security Affairsby @securityaffairsApr 8, 2023 · 22:16 UTC (Apr 8, 2023)1 min read3 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-27876 CVE-2021-27877 CVE-2021-27878 CVE-2019-1388 CVE-2023-26083

Tags: cve-2021-27876 cve-2021-27877 cve-2021-27878 cve-2019-1388 cve-2023-26083 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2019-1388	Local Privilege Escalation in Microsoft Windows Certificate Dialog (CVE-2019-1388)	7.8	9%	KEVRansomware	Nov 12, 2019 KEV Apr 7, 2023
CVE-2021-27877 +2 related CVEs CVE-2021-27878 CVE-2021-27876	Unauthenticated RCE in Veritas Backup Exec Agent via Legacy SHA Authentication	9.8 group max	65%	KEVRansomwarePoC	Mar 1, 2021 KEV Apr 7, 2023
CVE-2023-26083	Memory Leak Information Disclosure in Arm Mali GPU Kernel Drivers	3.3	1%	KEV	Apr 6, 2023 KEV Apr 7, 2023

From the original article

1 min read at securityaffairs.com

US CISA has added Veritas Backup Exec flaws, which were exploited in ransomware attacks, to its Known Exploited Vulnerabilities catalog. U. S.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.