Exploit / PoCcritical
Israeli Firm Helped Governments Target Journalists, Activists with 0
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-21166 | Race Condition Heap Corruption in Google Chromium (Chrome, Edge, Opera) | 8.8 | 24% | KEV | KEV |
| CVE-2021-30551 | V8 Type Confusion Zero-Day in Google Chrome (CVE-2021-30551), Exploited in the Wild | 8.8 | 65% | KEVPoC | KEV |
CVE-2021-33771+1 related CVE | Privilege Escalation in Microsoft Windows Kernel Exploited in the Wild (CVE-2021-33771) | 7.8 | 10% | KEV | KEV |
From the original article
3 min read at thehackernews.com
Two of the zero-day Windows flaws rectified by Microsoft as part of its Patch Tuesday update earlier this week were weaponized by an Israel-based company called Candiru in a series of "precision attacks" to hack more than 100 journalists, academics, activists, and political dissidents globally.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.