Vulnerabilitycritical
Vulnerability landscape analysis for Q2 2025
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-0199 | Remote Code Execution in Microsoft Office and WordPad via crafted document files | 7.8 | 99% | KEVRansomwarePoC ×6 | KEV |
| CVE-2017-11882 | Memory Corruption RCE in Microsoft Office via Legacy Equation Editor | 7.8 | 100% | KEVRansomwarePoC ×10 | KEV |
| CVE-2018-0802 | Memory Corruption RCE in Microsoft Office Equation Editor | 7.8 | 93% | KEVRansomwarePoC ×3 | KEV |
| CVE-2019-13272 | Local Privilege Escalation to Root in Linux Kernel ptrace (pkexec PTRACE_TRACEME) | 7.8 | 52% | KEVPoC ×5 | KEV |
| CVE-2021-22555 | Linux Kernel Netfilter Heap OOB Write Enables Privilege Escalation (CVE-2021-22555) | 7.8 | 79% | KEVPoC ×5 | KEV |
| CVE-2022-0847 | Local Privilege Escalation ('Dirty Pipe') in the Linux Kernel | 7.8 | 93% | KEVPoC ×4 | KEV |
| CVE-2023-38831 | Code Execution in RARLAB WinRAR via Crafted ZIP File/Folder Name Confusion | 7.8 | 100% | KEVRansomwarePoC ×4 | KEV |
| CVE-2024-35250 | Local Privilege Escalation in Microsoft Windows Kernel-Mode Driver | 7.8 | 25% | KEV | KEV |
| CVE-2025-24071 | Windows File Explorer Spoofing Vulnerability Exposes Authentication Credentials | 6.5 | 23% | PoC ×2 |
From the original article
10 min read at securelist.com
Vulnerability registrations in Q2 2025 proved to be quite dynamic. Vulnerabilities that were published impact the security of nearly every computer subsystem: UEFI, drivers, operating systems, browsers, as well as user and web applications. Based on our analysis, threat actors continue to leverage vulnerabilities in real-world attacks as a means of gaining access to user systems, just like in previous periods .
By @Securelist · securelist.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.