4 years, 5 months ago

Google discloses new zero-day vulnerability in Windows OS

Google has revealed a zero-day vulnerability in the Windows operating system that lets hackers to exploit it actively. Zero-day vulnerability, a software security flaw that is known to the software vendor but doesn’t have a patch in place to fix the flaw, was discovered by Google’s Project Zero security researchers. According to Google, the zero-day bug in the Windows Kernel allows an attacker to gain more user access in Windows that can be used to elevate an attacker’s code with additional permissions. By exploiting Windows vulnerability with a separate bug in Chrome, which Google patched last week, attackers escape Chrome’s security and run malicious code on the operating system. However, he did not provide details on who was exploiting the zero-day as this vulnerability is usually discovered by nation- Director of Google’s Threat Analysis Team, Shane Huntley said the attacks were targeted but unrelated to the US election related targeting.

The Hindu

Discover Related