• Home
  • Internet
  • Internet News
  • Google Discloses Targeted Exploit Found in Windows That Gave Hackers Administrator Access to System

Google Discloses Targeted Exploit Found in Windows That Gave Hackers Administrator Access to System

Google’s Project Zero team’s technical lead said that Microsoft is expected to release a patch on November 10.

Share on Facebook Tweet Snapchat Share Reddit Comment
Google Discloses Targeted Exploit Found in Windows That Gave Hackers Administrator Access to System

Google has already patched the bug in Chrome

Highlights
  • Google has disclosed a targeted exploit found in Windows
  • The vulnerability was present since Windows 7
  • Google patched Chrome on October 20

Google has disclosed a vulnerability with Windows Kernel Cryptography Driver that is being exploited to gain access to the target system. This vulnerability works alongside a Google Chrome flaw and according to a report, has only been spotted in conjunction with the Chrome vulnerability. Google patched Chrome and other Chromium based browsers starting October 20 but Microsoft is expected to release a patch on November 10. This is a targeted exploit and not widespread, which means not all users will be affected by it.

The Windows Kernel Cryptography Driver vulnerability CVE-2020-17087 has been disclosed by Google's Project Zero team after a seven-day disclosure deadline, as it was being used in the wild. This kind of vulnerability can be used to exploit privilege escalation. It is being used in tandem with a Google Chrome flaw (CVE-2020-15999) to gain access to a target system. Following that, the CVE-2020-17087 vulnerability can give the attacker administrator access to the target. While Google patched the flaw in Chrome on October 20, Microsoft is expected to release a patch on November 10, according to Project Zero team technical lead Ben Hawks on Twitter.

The Windows Kernel Cryptography Driver vulnerability has been found to be present ever since Windows 7 but was tested in an up-to-date Windows 10 1903 (64-bit) build. Director of Google's Threat Analysis Group, Shane Huntley, has also confirmed that this is a targeted exploitation and is not related to US election-related targeting. Since it is targeted, not all Chrome and Windows users will be affected, as per a report by HelpNetSecurity.

The report also states that a Microsoft spokesperson shared that exploitation of the vulnerability has only been seen in tandem with the Chrome vulnerability that was patched on October 20. Other Chromium based browsers like Opera and Microsoft Edge were patched on October 21 and October 22, respectively.


Is OnePlus 8T the best 'value flagship' of 2020? We discussed this on Orbital, our weekly technology podcast, which you can subscribe to via Apple Podcasts, Google Podcasts, or RSS, download the episode, or just hit the play button below.

 

Comments

For the biggest CES 2021 stories and latest updates, visit our CES hub.

Vineet Washington Vineet Washington writes about gaming, smartphones, audio devices, and new technologies for Gadgets 360, out of Delhi. Vineet is a Senior Sub-editor for Gadgets 360, and has frequently written about gaming on all platforms and new developments in the world of smartphones. In his free time, Vineet likes to play video games, make clay models, play the guitar, watch sketch-comedy, and anime. Vineet is available on vineetw@ndtv.com, so please send in your leads and tips. More
Samsung Galaxy Note 20 FE Revealed on Company Site Ahead of Official Confirmation
Dirt 5 Release Date, PC System Requirements, Gameplay, Review, and More

Related Stories

 
 

Advertisement

Advertisement

© Copyright Red Pixels Ventures Limited 2021. All rights reserved.
Listen to the latest songs, only on JioSaavn.com