VB2020 06
vb2020.vblocalhost.com · Undated · Licence: not cleared; local research copy only
CVEs this report names
5 CVEs- CVE-2017-11882Microsoft Office Memory Corruption VulnerabilityMicrosoft · OfficeKEVRansomwarePublic exploitHigh · 7.8T1566.001Spearphishing AttachmentT1059Command and Scripting Interpreter13 reports99.9%Top 0.03%88.5priority
- CVE-2018-0802Microsoft Office Memory Corruption VulnerabilityMicrosoft · OfficeKEVRansomwarePublic exploitHigh · 7.8T1204.002Malicious FileT1203Exploitation for Client Execution8 reports93.3%Top 0.17%88.4priority
- CVE-2019-0803Microsoft Win32k Privilege Escalation VulnerabilityMicrosoft · Win32kKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation1 report45.2%Top 1.2%82.1priority
- CVE-2020-8468Trend Micro Multiple Products Content Validation Escape VulnerabilityTrend Micro · Apex One, OfficeScan and Worry-Free Business Security AgentsKEVHigh · 8.8T1190Exploit Public-Facing ApplicationT1068Exploitation for Privilege Escalation1 report6.2%Top 6.5%66.7priority
- CVE-2019-9489A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (versions XG and 11.0), and Worry-Free…Trend Micro · Apex One, OfficeScan, Worry-Free Business Security1 report2.3%Top 17%56.1priority
Where it names them
CVE-2017-11882 Original (opens in a new tab) ↗
exploits (CVE-2017-11882 / CVE-2018-0802)
CVE-2018-0802 Original (opens in a new tab) ↗
exploits (CVE-2017-11882 / CVE-2018-0802)
CVE-2019-0803 Original (opens in a new tab) ↗
CVE-2019-0803 and MS16-032 exploits
CVE-2020-8468 Original (opens in a new tab) ↗ Original (opens in a new tab) ↗
CVE-2020-8468 (patched Mar 2020)
CVE-2020-8468 (patched Mar 2020)
CVE-2019-9489 Original (opens in a new tab) ↗ Original (opens in a new tab) ↗
CVE-2019-9489 (patched Apr 2019)
CVE-2019-9489 (patched Apr 2019)
Techniques drawn from this report
NoneNo passage in this report has been tied to an ATT&CK technique.