Category: Microsoft|Jul 23, 2021 | Author: Admin

Newly spotted Windows 10 and 11 vulnerability lets any user have admin privileges

Share on

Windows 11 preview testers have discovered an early security bug, one that seems to have carried over from Windows 10. This new Windows 10 and Windows 11 vulnerability creates a path for any local user to gain admin privileges.

As reported by Bleeping Computer, some Windows 10 and Windows 11 registry files are accessible by the ‘Users’ group, allowing anyone to extract the hashed credentials of admin accounts and use them to gain admin privileges.

 

The registry files we are talking about are stored in the C:\Windows\system32\config folder. There you will find the ‘SYSTEM’, ‘SECURITY’, ‘SAM’, ‘DEFAULT’, and ‘SOFTWARE’ files, which contain sensitive information that should not be accessible to low-level accounts. Unfortunately, that’s not the case.

 

To check the file permissions on this file, open the command prompt, and write “icacls C:\Windows\system32\config\’name of the file'”. After pressing enter, the command prompt will show you the file permissions.

 

When Windows is running, these files are in use, meaning unwanted guests won’t be allowed to access it. However, these files may be backed up by Windows shadow volume copies, which are accessible.

 

Microsoft has confirmed the vulnerability and plans to release a fix soon, although a community-generated fix has already been found. To fix the problem yourself, you’ll want to open up a command prompt as an administrator and execute the following command: “icacls %windir%\system32\config\*.* /inheritance:e”. If you have any shadow volume copies that were made before running the command, delete them.

Sponsored Ads:

Comments:


TEST

Microsoft 365 Copilot rollout set for Nov. 1

Category: Microsoft|Sep 27, 2023 | Author: Admin

Google US antitrust trial: A timeline

Category: Google|Sep 26, 2023 | Author: Admin

Changes color when you touch it

Category: Apple|Sep 25, 2023 | Author: Admin

Ridicules Apple and the iPhone

Category: IT|Sep 24, 2023 | Author: Admin

The iPhone will get this later this year

Category: Apple|Sep 23, 2023 | Author: Admin

You should now launch Steam

Category: General|Sep 22, 2023 | Author: Admin

You need to update again

Category: Apple|Sep 21, 2023 | Author: Admin

Be warned before you make the big mistake

Category: General|Sep 20, 2023 | Author: Admin

“We were bullied by Apple”

Category: Apple|Sep 19, 2023 | Author: Admin

We weren't supposed to know this

Category: Microsoft|Sep 18, 2023 | Author: Admin

Apple's clever trick

Category: Apple|Sep 17, 2023 | Author: Admin

Price cut

Category: IT|Sep 16, 2023 | Author: Admin

Sold out

Category: Apple|Sep 15, 2023 | Author: Admin

What Apple has done is bizarre

Category: Apple|Sep 14, 2023 | Author: Admin

Ban iPhone 12

Category: Apple|Sep 13, 2023 | Author: Admin
more