Ransomwarecritical

Security Affairs newsletter Round 538 by Pierluigi Paganini

Security Affairsby @securityaffairsAug 24, 2025 · 07:18 UTC (Aug 24, 2025)2 min read1 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2025-29824 CVE-2025-31324 CVE-2025-43300

Tags: cve-2025-29824 cve-2025-31324 cve-2025-43300 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-29824	Use-After-Free Privilege Escalation in Microsoft Windows CLFS Driver (Actively Exploited)	7.8	19%	KEVRansomwarePoC ×2	Apr 8, 2025 KEV Apr 8, 2025
CVE-2025-31324	Unauthenticated File Upload RCE in SAP NetWeaver Visual Composer	9.8	99%	KEVRansomwarePoC	Apr 24, 2025 KEV Apr 29, 2025
CVE-2025-43300	Actively Exploited Out-of-Bounds Write in Apple iOS/iPadOS/macOS Image I/O	10.0	65%	KEVPoC	Aug 21, 2025 KEV Aug 21, 2025

From the original article

2 min read at securityaffairs.com

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.