CVE-2017-0022 Windows Zero-Day flaw used by AdGholas hackers and it was included in Neutrino EK
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2016-3298 | Information Disclosure in Microsoft Internet Explorer Messaging API | 6.5 | 33% | KEV | KEV |
| CVE-2016-3351 | Information Disclosure in Microsoft Internet Explorer and Edge | 6.5 | 26% | KEVRansomwarePoC | KEV |
| CVE-2017-0022 | Information Disclosure in Microsoft XML Core Services (MSXML) on Windows | 6.5 | 18% | KEVPoC | KEV |
From the original article
2 min read at securityaffairs.comThe recently patched CVE-2017-0022 Windows Zero-Day vulnerability has been exploited by threat actors behind the AdGholas malvertising campaign and Neutrino EK since July 2016. Microsoft has fixed several security flaws with the March 2017 Patch Tuesday updates. According to security experts at Trend Micro, the list of fixed vulnerabilities includes three flaws that had been exploited in the wild since last summer.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.