Analysis of Windows Exploitation Trends in 2015

• •Patched vulnerabilities in Windows quadrupled in 2015 compared to 2014.
• •Internet Explorer was the most affected component, with significant vulnerabilities addressed.
• •Drive-by downloads and Local Privilege Escalation were common attack methods.

ESET's annual report on Windows exploitation in 2015 reveals a significant increase in patched vulnerabilities, quadrupling from the previous year. The report highlights that Internet Explorer remained the most patched component, followed by User Mode Components. Key attack methods included drive-by downloads and Local Privilege Escalation (LPE). The report emphasizes the importance of timely updates to mitigate risks from unpatched vulnerabilities. ESET also discusses the emergence of exploits linked to the Hacking Team and the introduction of new security features in Microsoft products. The findings are crucial for users to understand the evolving threat landscape and the necessity of implementing security updates.