Ransomwarecritical
Analysis of the evolution of exploit kits in the threat landscape
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2016-0189 | Memory Corruption RCE in Microsoft IE Scripting Engines (JScript/VBScript) | 7.5 | 94% | KEVRansomwarePoC | KEV |
| CVE-2018-4878 | Use-After-Free RCE in Adobe Flash Player before 28.0.0.161 | 7.8 | 90% | KEVRansomwarePoC ×2 | KEV |
| CVE-2018-5002 | Stack Buffer Overflow RCE in Adobe Flash Player | 7.8 | 24% | KEV | KEV |
| CVE-2018-8174 | Out-of-Bounds Write RCE in Microsoft Windows VBScript Engine | 7.5 | 88% | KEVRansomwarePoC ×2 | KEV |
From the original article
3 min read at securityaffairs.com
Cyber criminal organizations and state-sponsored hackers continue to use Exploit kits to compromise targets world worldwide if the use of Exploit kits is decreased across the recent months, some of them were improved by adding the code to exploit recently discovered Flash and Internet Explorer zero-day vulnerabilities.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.