Skip to content

CVE-2025-27038

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
March 5, 2026
Last Seen
November 4, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Russian state-sponsored hackers, identified as APT29, have launched a large-scale watering hole attack targeting mobile devices. The campaign, detected in mid-October 2026, exploited known vulnerabilities to harvest browser cookies and sensitive data from users visiting compromised or lookalike webs...

Google's Threat Intelligence Group tracked 90 zero-day vulnerabilities exploited in 2025, a rise from 78 in 2024. Less than half of these vulnerabilities were attributed to specific threat actors, with spyware vendors and China being the most prominent. This increase highlights ongoing cybersecurity...

Public Exploits

Checking GitHub for proof-of-concept code…