Vulnerabilitymedium

CVE-2016-7200 & CVE-2016-7201 flaws added to the Sundown Exploit Kit

Security Affairsby @securityaffairsNov 16, 2017 · 18:36 UTC (Nov 16, 2017)2 min read1 · 1 read

Read at securityaffairs.com

Analyze CVE-2016-7200 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2016-7200 CVE-2016-7201 CVE-2016-0189

Tags: cve-2016-7200 cve-2016-7201 cve-2016-0189 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2016-0189	Memory Corruption RCE in Microsoft IE Scripting Engines (JScript/VBScript)	7.5	94%	KEVRansomwarePoC	May 11, 2016 KEV Mar 28, 2022
CVE-2016-7200 +1 related CVE CVE-2016-7201	Memory Corruption RCE in Microsoft Edge Chakra JavaScript Engine (CVE-2016-7200)	8.8	83%	KEVPoC ×3	Nov 10, 2016 KEV Mar 28, 2022

From the original article

2 min read at securityaffairs.com

The operators behind the Sundown exploit kit have started using two Microsoft Edge flaws just a few days after researchers published a PoC exploit. The Sundown exploit kit is becoming one of the most popular crimeware kits in the hacking underground.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.