Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-09-23 08:29 UTC
Importiert: 2026-09-29 14:46 UTC
CVSS: 8.8
Quelle-ID: thn_global
uid_hash: 84a793485acdbcda3bb305c024c6a9d98e0616af97c0104d8a42817aa1e8a897

The Hacker News

Inhalt

A Chinese threat actor codenamed UTA0565 has been observed exploiting the recently disclosed Google Chrome-Microsoft Windows exploit chain as zero-days through fake websites.

The attacks, detected on September 3 and 4, 2026, involved the chaining of two vulnerabilities in Chrome (CVE-2026-85046, CVE-2026-87491) and one impacting Windows Advanced Local Procedure Call (CVE-2026-85880) to break

Verknuepfte CVEs

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	Veroeffentlicht (CVE.org)
CVE-2026-85046	HIGH	8.8	HIGH	8.8	2026-09-03
CVE-2026-85880	HIGH	8.8	HIGH	7.8	2026-09-08
CVE-2026-87491	HIGH	8.8	HIGH	8.8	2026-09-09

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
The Hacker News	thn_global	security_news		-	de	https://feeds.feedburner.com/TheHackersNews

Zurueck zur Eintrags-Liste