Researchers say they have found severe Windows vulnerability - over 500 million PCs may be exposed
Microsoft is investigating the matter.
Researchers at Padua University in Italy say they have discovered a design weakness in the Control Flow Guard (CFG) - a security layer in Windows 8.1 and 10. The Italian researchers call the vulnerability of "Back to the Epilogue" (BATE).
Researchers say they have found severe Windows vulnerability - over 500 million PCs may be exposed
Microsoft is investigating the matter.
Researchers at Padua University in Italy say they have discovered a design weakness in the Control Flow Guard (CFG) - a security layer in Windows 8.1 and 10. The Italian researchers call the vulnerability of "Back to the Epilogue" (BATE).
- Design error
CFG was first released with Windows 8.1 Update 3 and is also part of Windows 10, preventing, among other things, attackers from running code in any area of the system.
University researchers say that, in an effort to improve performance and make CFG backward compatible, Microsoft has made several design errors, which means they are able to cross the security team.
According to reports, which can be read in its entirety here, more than 500 million PCs are exposed to attacks. The research team plans to demonstrate BATE weakness - using the Edge browser in Windows 10 - during the Black Hat Asia Conference, which will be released later this month.
Examining the case
Microsoft states in a statement that it investigates the findings of the researchers. Andrea Biondo, one of the researchers, says that as far as they know, Microsoft will close this gap in the RS4 update. That is, the wet update is expected in a short period of time.