Researchers say they have found severe Windows vulnerability - over 500 million PCs may be exposed

Microsoft | Mar 12, 2018 | Master3395

Researchers say they have found severe Windows vulnerability - over 500 million PCs may be exposed

Microsoft is investigating the matter.

Researchers at Padua University in Italy say they have discovered a design weakness in the Control Flow Guard (CFG) - a security layer in Windows 8.1 and 10. The Italian researchers call the vulnerability of "Back to the Epilogue" (BATE).

- Design error
CFG was first released with Windows 8.1 Update 3 and is also part of Windows 10, preventing, among other things, attackers from running code in any area of ​​the system.

University researchers say that, in an effort to improve performance and make CFG backward compatible, Microsoft has made several design errors, which means they are able to cross the security team.

According to reports, which can be read in its entirety here, more than 500 million PCs are exposed to attacks. The research team plans to demonstrate BATE weakness - using the Edge browser in Windows 10 - during the Black Hat Asia Conference, which will be released later this month.

Examining the case
Microsoft states in a statement that it investigates the findings of the researchers. Andrea Biondo, one of the researchers, says that as far as they know, Microsoft will close this gap in the RS4 update. That is, the wet update is expected in a short period of time.

Keywords: Microsoft, security, windows10

Sources: Dark Reading

Author: Master3395


comments powered by Disqus

Page 1 of 375  >  >>

New Window Defender Extension Launches - Insecure Websites Open in Edge


Mar 19, 2019 | Category: General | Comments

Works in Chrome and Firefox.

read more…

Now the extensions have appeared - public testing is approaching


Mar 18, 2019 | Category: General | Comments

Found 82 extensions for new Edge.

As we interpret recently Microsoft's activity, we are not the long wait from a public testing period of their new Chromium-based browser. Last week we got a sneak peek at new Edge in some photos you can see here, and it was explained that the first tests only had support in 64-bit Windows 10.

read more…

Check out the crazy sum EA paid Ninja to pour Apex Legends


Mar 17, 2019 | Category: IT | Comments

Earned millions of dollars to play for a few hours.

Tyler Blevins, better known as the Ninja in the gaming world, was one of the profiled streams paid by EA to play Apex Legends during launch.

read more…

Page 1 of 375  >  >>