Malwarecritical
Intellexa Leaks Reveal Zero-Days and Ads-Based Vector for Predator Spyware Delivery
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-1048 | Use-After-Free Privilege Escalation in Android Kernel (CVE-2021-1048) | 7.8 | 1% | KEV | KEV |
| CVE-2021-37973 | Use-After-Free Sandbox Escape in Google Chrome/Chromium Portals | 9.6 | 12% | KEV | KEV |
| CVE-2021-37976 | Information Disclosure in Google Chrome/Chromium Memory Implementation (CVE-2021-37976) | 6.5 | 20% | KEVPoC | KEV |
| CVE-2021-38000 | Improper Input Validation in Google Chrome for Android Allows Forced URL Navigation | 6.1 | 5% | KEVPoC | KEV |
| CVE-2021-38003 | Memory Corruption in Chromium V8 JSON.stringify Affects Chrome, Edge, Opera | 8.8 | 39% | KEVPoC | KEV |
| CVE-2023-2033 | Type Confusion in Google Chromium V8 Engine Exploited in the Wild | 8.8 | 41% | KEV | KEV |
| CVE-2023-2136 | Skia Integer Overflow Sandbox Escape in Google Chrome | 9.6 | 6% | KEV | KEV |
| CVE-2023-3079 | Type Confusion in Google Chromium V8 Engine Exploited in the Wild | 8.8 | 38% | KEVPoC | KEV |
CVE-2023-41993+2 related CVEs | WebKit Code Execution Flaw in Apple iOS, iPadOS, macOS, and Safari | 8.8 group max | 24% | KEV | KEV |
| CVE-2023-4762 | Chromium V8 Type Confusion (CVE-2023-4762) Enables RCE via Crafted Web Pages | 8.8 | 41% | KEV | KEV |
| CVE-2024-4610 | Use-After-Free in Arm Mali Bifrost/Valhall GPU Kernel Drivers Exploited in the Wild | 7.8 | <1% | KEV | KEV |
| CVE-2025-48543 | Use-After-Free in Android Runtime Enables Sandbox Escape and Local Privilege Escalation | 8.8 | <1% | KEV | KEV |
| CVE-2025-6554 | Type Confusion in Google Chrome V8 Allows Arbitrary Read/Write (Actively Exploited) | 8.1 | 14% | KEV | KEV |
From the original article
6 min read at thehackernews.com
A human rights lawyer from Pakistan's Balochistan province received a suspicious link on WhatsApp from an unknown number, marking the first time a civil society member in the country was targeted by Intellexa's Predator spyware, Amnesty International said in a report.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.