Vulnerabilitymedium
Purple Fox Exploit Kit Adds Two Microsoft Vulnerabilities
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2019-1458 | Win32k Object-Handling Flaw Enables Local Privilege Escalation in Microsoft Windows | 7.8 | 74% | KEVRansomwarePoC ×2 | KEV |
| CVE-2020-0674 | Use-After-Free RCE in Microsoft Internet Explorer Scripting Engine | 7.5 | 87% | KEVPoC ×4 | KEV |
From the original article
2 min read at infosecurity-magazine.com
Security company Proofpoint has identified two new exploits coded into Purple Fox, an exploit kit that has evolved dramatically in the last year. The updates show that cyber-criminals are continuing to invest in infection tools to help get their malware onto victims’ systems even though exploit kits are declining as an attack technique, the company said.
By Danny Bradbury · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.