Novel Exploit Chain Enables Windows UAC Bypass

September 27, 2024 at 03:44PM Researchers have identified a medium-severity vulnerability in Windows, labeled as CVE-2024-6769, which could enable an authenticated attacker to gain full system privileges. Fortra’s proof-of-concept exploit showcases the capability to shut down the system and manipulate critical files, despite Microsoft’s stance that it falls under acceptable security boundaries. The vulnerability allows … Read more

CLFS Bug Crashes Even Updated Windows 10, 11 Systems

August 12, 2024 at 02:02PM A flaw in the CLFS driver triggers blue screen crashes across various Windows versions. The bug involves inadequate validation of log file data, enabling attackers to cause system crashes at will. Despite a medium security score, the issue remains unresolved, posing potential disruption to business operations. Microsoft is yet to … Read more