Threats Tagged 'cve-2026-85880'

In early September 2026, Chinese threat actor UTA0565 exploited unpatched zero-day vulnerabilities in Google Chrome and Microsoft Windows through sophisticated phishing campaigns. The actor registered fake domains impersonating legitimate organizations including China Digital Times and the Center for American Progress, sending targeted phishing emails to Asian government entities. Victims were directed to spoofed websites hosting an exploit chain leveraging CVE-2026-85046, CVE-2026-87491, and CVE-2026-85880. The attacks delivered CLEANGULP, a previously undocumented malware family with backdoor capabilities including command execution, file operations, and beacon object file execution. The malware communicated with command-and-control infrastructure via encrypted HTTP traffic using custom encoding. Multiple Chinese APT groups demonstrated coordinated access to this exploit kit, suggesting widespread sharing within the Chinese cyber espionage community during the vulnerability window.

HighVulnerabilityUnited States#cve#cve-2026-85046#gemstone

CVE-2026-68839 is a critical heap-based buffer overflow vulnerability in the Windows USB Mass Storage Class Driver affecting Windows 10 Version 1607 (build 10.0.14393.0). This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network without user interaction or privileges. An official fix is available for this vulnerability.

Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.