Magnitude exploit kit
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-8174 | Out-of-Bounds Write RCE in Microsoft Windows VBScript Engine | 7.5 | 88% | KEVRansomwarePoC ×2 | KEV |
| CVE-2018-8641 | An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka "Win32k Elevation… | 7.8 | 1% | ||
| CVE-2018-8653 | Memory Corruption RCE in Microsoft Internet Explorer Scripting Engine | 7.5 | 30% | KEV | KEV |
| CVE-2019-1367 | Memory Corruption RCE in Microsoft Internet Explorer Scripting Engine | 7.5 | 52% | KEVRansomware | KEV |
| CVE-2019-1429 | Memory corruption RCE in Microsoft Internet Explorer scripting engine | 7.5 | 77% | KEVPoC | KEV |
| CVE-2020-0674 | Use-After-Free RCE in Microsoft Internet Explorer Scripting Engine | 7.5 | 87% | KEVPoC ×4 | KEV |
From the original article
11 min read at securelist.com
Exploit kits are not as widespread as they used to be. In the past, they relied on the use of already patched vulnerabilities. Newer and more secure web browsers with automatic updates simply do not allow known vulnerabilities to be exploited.
By @Securelist · securelist.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.