Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
Google's Threat Intelligence Group tracked 90 zero-day vulnerabilities exploited in 2025, a rise from 78 in 2024. Less than half of these vulnerabilities were attributed to specific threat actors, with spyware vendors and China being the most prominent. This increase highlights ongoing cybersecurity...
A proof-of-concept exploit for the critical Linux kernel vulnerability CVE-2025-38352 has been released on GitHub. This vulnerability affects 32-bit Android devices and allows for complete privilege escalation to root access due to a use-after-free condition in the handle_posix_cpu_timers() function...
Two vulnerabilities related to POSIX CPU timers have been published, affecting systems that utilize these timers. CVE-2022-2585, published on January 8, 2024, involves a use-after-free issue when executing from a non-leader thread. CVE-2025-38352, published on July 22, 2025, addresses a race conditi...
A series of vulnerabilities in the Linux kernel, identified by researchers Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi, allow attackers in guest virtual machines to potentially expose sensitive information from the host operating system. This flaw, known as VMSCAPE, affects vari...
%20(1).webp)
