CISA Warns of Active Exploitation of 'PwnKit' Linux Vulnerability in the Wild
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-4344 | Memory Corruption Flaw in Apple iOS, macOS, tvOS, and watchOS (Pre-2018 Releases) | 7.8 | 2% | KEV | KEV |
| CVE-2019-8605 | Use-After-Free in Apple iOS, macOS, tvOS, watchOS Enables Privileged Code Execution | 7.8 | 18% | KEV | KEV |
| CVE-2020-3837 | Memory Corruption in Apple iOS, macOS, tvOS, watchOS Enables Kernel-Level Code Execution | 7.8 | 15% | KEV | KEV |
| CVE-2020-9907 | Memory Corruption with Kernel Privileges in Apple iOS, iPadOS, and tvOS | 7.8 | 3% | KEV | KEV |
| CVE-2021-30533 | PopupBlocker Policy Bypass in Google Chrome (CVE-2021-30553) | 6.5 | 17% | KEVPoC | KEV |
| CVE-2021-30983 | Kernel Buffer Overflow in Apple iOS and iPadOS Enables Arbitrary Code Execution | 7.8 | 3% | KEV | KEV |
| CVE-2021-4034 | Out-of-Bounds Read/Write Local Privilege Escalation in polkit pkexec (PwnKit) | 7.8 | 95% | KEVRansomwarePoC ×4 | KEV |
| CVE-2022-29499 | Unauthenticated RCE in Mitel MiVoice Connect Service Appliance | 9.8 | 55% | KEVRansomware | KEV |
From the original article
1 min read at thehackernews.com
The U. S. Cybersecurity and Infrastructure Security Agency (CISA) this week moved to add a Linux vulnerability dubbed PwnKit to its Known Exploited Vulnerabilities Catalog , citing evidence of active exploitation.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.