Authors of Purple Fox EK adds 2 Microsoft exploits
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2015-1701 | Local Privilege Escalation in Microsoft Windows Win32k.sys Kernel-Mode Driver | — | 56% | KEVRansomware | — KEV |
| CVE-2018-8120 | Local Privilege Escalation in Microsoft Win32k (Windows 7 / Server 2008) | 7.0 | 73% | KEVRansomwarePoC | KEV |
| CVE-2019-1458 | Win32k Object-Handling Flaw Enables Local Privilege Escalation in Microsoft Windows | 7.8 | 74% | KEVRansomwarePoC ×2 | KEV |
| CVE-2020-0674 | Use-After-Free RCE in Microsoft Internet Explorer Scripting Engine | 7.5 | 87% | KEVPoC ×4 | KEV |
From the original article
3 min read at securityaffairs.com
The authors of the Purple Fox EK have integrated two new exploits for Microsoft vulnerabilities to the Purple Fox EK. The Purple Fox EK continues to be improved by its authors that implemented two new exploits for Microsoft critical- and high-severity Microsoft vulnerabilities. The Purple Fox EK appears to have been built to replace the notorious RIG exploit kit (EK) in the distribution of the Purple Fox Trojan.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.