Vulnerabilitymedium
Midnight Blizzard delivered iOS, Chrome exploits via compromised government websites
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-37973 | Use-After-Free Sandbox Escape in Google Chrome/Chromium Portals | 9.6 | 12% | KEV | KEV |
| CVE-2023-41993 | WebKit Code Execution Flaw in Apple iOS, iPadOS, macOS, and Safari | 8.8 | 24% | KEV | KEV |
| CVE-2024-4671 | Use-After-Free Sandbox Escape in Google Chrome/Chromium | 9.6 | 8% | KEV | KEV |
| CVE-2024-5274 | Google Chrome V8 Type Confusion Allows In-Sandbox RCE via Crafted HTML Pages | 9.6 | 8% | KEVPoC | KEV |
From the original article
1 min read at helpnetsecurity.com
Suspected Russian hackers have been hitting iPhone and Android users visiting government websites with exploits first leveraged by commercial surveillance vendors, Google TAG researchers shared. Between November 2023 and July 2024, threat actors have repeatedly compromised the websites of the Mongolian Cabinet Secretariat ( cabinet. gov[.]
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.