Google is exposing Microsoft. There is a very dangerous loophole in Windows 10 refused to fix!
Windows 10, like any operating system or program in the world, has security problems, flaws and other types of errors that are detected over time. There is nothing unusual yet, just update Windows 10 to the latest version that usually contains all patches that solve performance or security issues. What is unacceptable is that Google is instilling Microsoft in a serious security vulnerability and is slowing down its fix.
Google Project Zero is a security expert for the internet giant that was launched in July 2014 and is dedicated to locating Zero Day attacks in different programs. In general, these errors are reported specifically to the manufacturer and are published as soon as the patch is issued. However, if 90 days have passed without fixing the loophole, it is also deployed to "press" the manufacturer to speed up the release of the patch.
Microsoft hasn't fixed a problem in 6 months
All this brings us back to September 24 this year when Google Project Zero published all the details about a security vulnerability that took advantage of an error in the swowpl64.exe spooler API. Microsoft has been aware of the loophole since December 2019, but has spent 6 months doing nothing. Finally, google Project Zero was declared a vulnerability.
If this vulnerability is successfully exploited, the attacker can handle the splwow64 process.exe to perform random code on the system, which may result in the installation of malware capable of displaying, altering or deleting data, or creating new user accounts and thus controlling the victim's computer.
Finally, Microsoft has released a patch to fix the problem, but nothing is further from the truth. They explained to us from Google that "the gap still exists, just the way it is exploited has changed."
Now, this vulnerability has been indexed by the code CVE-2020-17008 and we are expected to have a correction on January 12, 2021. The problem is that Google Project Zero has even shown proof of how to exploit it, so hopefully hackers will not exploit it to hack into victims.
Read : 5G technology in iPhone 12 is much slower than 4G.
Keyword : google,google news,microsoft,microsoft,hacker,windows,windows 10
Post a Comment