Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The kernel driver, accessible to low-privileged users, exposes a function that fails to properly validate the privileges of the calling process. This allows creating files at arbitrary locations with full user control, ultimately allowing for privilege escalation to SYSTEM.

CVE-2025-1865 is a high-severity privilege escalation vulnerability found in the kernel driver component of Elaborate Bytes AG's Virtual CloneDrive software. The vulnerability arises because the kernel driver exposes a function accessible to low-privileged users that fails to properly validate the privileges of the calling process. Specifically, this flaw allows an attacker with limited user privileges to create files at arbitrary locations on the system with full user control. By exploiting this capability, an attacker can escalate their privileges to SYSTEM level, effectively gaining full administrative control over the affected Windows system. The vulnerability is classified under CWE-284, which pertains to improper access control. The CVSS 4.0 score of 8.5 reflects the high impact and relatively low complexity of exploitation, as the attack vector is local (AV:L), requires low privileges (PR:L), and no user interaction (UI:N). The vulnerability does not require authentication tokens beyond low user privileges and does not depend on network access, limiting the attack surface to local or otherwise compromised user accounts. No known exploits are currently reported in the wild, and no patches have been published yet. However, the presence of a kernel driver vulnerability that allows arbitrary file creation and privilege escalation is a critical concern, as it can be leveraged by malware or malicious insiders to gain persistent, elevated access on affected systems. Virtual CloneDrive is a widely used virtual CD/DVD drive emulator on Windows platforms, often installed in corporate environments for software testing, legacy application support, or media mounting purposes. The vulnerability's exploitation could lead to full system compromise, data theft, unauthorized system modifications, and disruption of business operations.

Detailed information about CVE-2025-1865: CWE-284 in Elaborate Bytes AG Virtual CloneDrive affecting Elaborate Bytes AG Virtual CloneDrive. Get real-time update

CVE-2025-1865: CWE-284 in Elaborate Bytes AG Virtual CloneDrive - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-1865: CWE-284 in Elaborate Bytes AG Virtual CloneDrive

Threats Tagged 'cve-2025-1865'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-1865'

Lead Pen Test Professional