AfterDawn: Tech news

Google reveals actively exploited Windows vulnerability

Written by Andre Yoskowitz (Google+) @ 31 Oct 2016 23:19 User comments (3)

Google reveals actively exploited Windows vulnerability Google has revealed details of a 0-day vulnerability in the Windows operating system that it claims is being currently exploited.
The search giant disclosed the flaw to Microsoft just 10 days ago, but Microsoft has not yet released a patch or even an advisory.

Reads Google's post:

"The Windows vulnerability is a local privilege escalation in the Windows kernel that can be used as a security sandbox escape. It can be triggered via the win32k.sys system call NtSetWindowLongPtr() for the index GWLP_ID on a window handle with GWL_STYLE set to WS_CHILD. Chrome's sandbox blocks win32k.sys system calls using the Win32k lockdown mitigation on Windows 10, which prevents exploitation of this sandbox escape vulnerability.


Microsoft was not happy with the release of the details before any patch: "We believe in coordinated vulnerability disclosure, and today's disclosure by Google puts customers at potential risk. Windows is the only platform with a customer commitment to investigate reported security issues and proactively update impacted devices as soon as possible. We recommend customers use Windows 10 and the Microsoft Edge browser for the best protection."

Source:
VB

Previous Next  

3 user comments

11.11.2016 15:56

Quote:
Windows is the only platform with a customer commitment to investigate reported security issues and proactively update impacted devices as soon as possible. We recommend customers use Windows 10 and the Microsoft Edge browser for the best protection.
Ummm... Yeah. Pull the other leg?

23.11.2016 4:55

and what i find is excellent about this is microsoft did know about this bug because we told them 3 months ago and they did nothing to fix it so did you think they would fix it now

35.11.2016 10:48

This topic has merit from BOTH sides.


IMO...good for Google for doing this. It creates IMMEDIATE and MASSIVE AWARENESS of a problem that may otherwise be ignored by the powers that be.


On the other hand, as mentioned, it creates awareness for the wrong, negative uses too for those nefarious peeps.




Again......both perspectives have merit. I'm a bit more toward the first one.

Comments have been disabled for this article.

Latest news

Intel announces: First commercial 5G modem in development Intel announces: First commercial 5G modem in development (20 Nov 2017 16:46)
The world's second largest semiconductor manufacturer, Intel, has announced a major project in mobile chips. The company has introduced a future portfolio for commercial 5G modems. According ....
1 user comment
CCleaner becomes adware, here's how to avoid Avast ads CCleaner becomes adware, here's how to avoid Avast ads (20 Nov 2017 13:00)
One of the more popular Windows cleanup tools, CCleaner, has added Avast ads on to their software. After being acquired by Avast, CCleaner wants you to install the virus protection suite along ....
2 user comments
Tesla's power pack charges your phone like a Supercharger Tesla's power pack charges your phone like a Supercharger (18 Nov 2017 13:25)
Tesla announced yesterday two incredible products that are due in two or three years. However, you might not have the money, nor the interest, to buy either Tesla Semi or Roadster, but there ....
Apple's newest product misses the entire holiday season, hits the stores in early 2018 Apple's newest product misses the entire holiday season, hits the stores in early 2018 (18 Nov 2017 12:20)
Apple has decided to push back one of the products originally revealed nearly 6 months ago in WWDC. The smart speaker, dubbed HomePod, has been delayed further and won't be seen in stores this ....
1 user comment
Tesla unveils two new vehicles, electric semi and super-fast new Roadster Tesla unveils two new vehicles, electric semi and super-fast new Roadster (17 Nov 2017 10:53)
Tesla has today announced two new vehicle prototypes that will bring the total number of Tesla cars, and now trucks, to six. As expected Tesla unveiled their "beastly" semi-truck the first time ....
1 user comment

News archive