Vulnerabilitycritical
New Kit, Same Player: Top 10 Vulnerabilities Used by Exploit Kits in 2016
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2015-0313 | Use-After-Free Remote Code Execution in Adobe Flash Player | — | 95% | KEV | — KEV |
| CVE-2015-1671 | TrueType Font Parsing RCE in Microsoft Windows, .NET, Office, Lync, and Silverlight | — | 49% | KEV | — KEV |
| CVE-2015-2419 | Memory Corruption RCE in Microsoft Internet Explorer JScript Engine | — | 53% | KEV | — KEV |
| CVE-2015-5119 | Use-After-Free RCE in Adobe Flash Player (ActionScript 3 ByteArray) | — | 99% | KEV | — KEV |
| CVE-2015-5122 | Use-After-Free RCE in Adobe Flash Player AS3 DisplayObject | — | 87% | KEV | — KEV |
From the original article
4 min read at recordedfuture.com
Adobe Flash Player provided eight of the top 10 vulnerabilities used by exploit kits in 2015. Vulnerabilities in Microsoft’s Internet Explorer and Silverlight are also major targets. Angler is currently the most popular exploit kit, regularly tied to malware including Cryptolocker.
By S3 · recordedfuture.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.