Collaborate Disseminate
Patch Tuesday July 2019 offers fixes for a total of 77 vulnerabilities, including 15 marked critical, rounded out by two zero-day flaws. Continue reading Two zero days and 15 critical flaws fixed in July’s Patch Tuesday
Why is SandboxEscaper releasing vulnerabilities in such an irresponsible way? It matters not – Microsoft must patch what’s in front of it whatever the backstory. Continue reading Microsoft’s battle with SandboxEscaper zero days turns into grim Groundhog Day
SandboxEscaper is back, with a second bypass for the recent CVE-2019-0841 Windows patch. Continue reading SandboxEscaper Debuts ByeBear Windows Patch Bypass
0patch has released an interim micropatch for the dangerous LPE bug while we wait for Microsoft’s official patch. Continue reading Zero-Day No More: Windows Bug Gets a Fix
A Belgian security researcher just unleashed four Windows zero-days. T. van Houtte, also known as SandboxEscaper, dropped her proofs-of-concept onto GitHub this week.
The post SandboxEscaper Drops 4 Windows Zero-Days appeared first on Security Bouleva… Continue reading SandboxEscaper Drops 4 Windows Zero-Days
As promised, developer SandboxEscaper has dropped exploit code for four more bugs, on the heels of releasing a Windows zero-day yesterday. Continue reading SandboxEscaper Drops Three More Windows Exploits, IE Zero-Day
SandboxEscaper has released her latest local privilege-escalation exploit for Windows. Continue reading Windows Zero-Day Drops on Twitter, Developer Promises 4 More
Wi-Fi chips used in several gaming consoles, Chromebooks, streaming boxes, routers and other types of devices have several firmware vulnerabilities that could allow attackers to compromise those systems over the air with no user interaction. The vulne… Continue reading Wi-Fi Chip Firmware Flaws Enable Over-the-Air Hacking
A security researcher released exploit code for an unpatched bug in Windows that could allow an attacker with limited privileges to delete system files. Exploiting the bug requires winning a race condition on the machine, so a successful exploit can t… Continue reading New Windows Zero-day Bug Allows Deleting Arbitrary Files
A security researcher who uses the online handle SandboxEscaper has published proof-of-concept exploit code for an unpatched vulnerability in Windows. The flaw is located in the “MsiAdvertiseProduct” function, which, according to Microsoft… Continue reading Researcher Drops Third Windows Zero-Day Exploit in Four Months