Security Researcher Uncovers New Windows Zero-day Exploit

Share post:

Security researcher Abdelhamid Naceri recently discovered a new Windows zero-day local privilege elevation vulnerability that allows admin privileges in various Windows operating systems.

The vulnerability affects all versions of Windows including Windows 10, 11, and Windows Server 2022. With the vulnerability in the wrong hands, threat actors with limited access to a compromised device can use it to increase their privileges to spread to any tentacle within the system or network.

Naceri explained how the bug works with his proof-of-concept exploit: “This variant was discovered during the analysis of CVE-2021-41379 patch. the bug was not fixed correctly, however, instead of dropping the bypass. I have chosen to drop this variant as it is more powerful than the original one.”

In another revelation, Naceri pointed out that it is possible to prevent ‘Standard’ users from performing MSI installation operations by configuring group policies.

For more information, read the original story in Bleeping Computer.

SUBSCRIBE NOW

Related articles

FBI rapidly hacks into Trump shooter’s phone, raises privacy concerns

Just two days after the attempted assassination at a Trump rally, the FBI announced it had gained access...

Disney investigating a potential major leak of internal communications

Disney is investigating a significant data breach by the hacking group Nullbulge, which claims to have accessed and...

Kaspersky to shut down its US business due to sanctions

Russian cybersecurity firm Kaspersky Lab announced it will cease its U.S. operations starting July 20, following sanctions from...

Google’s Gemini AI caught scanning private Google Drive documents without permission

Google's Gemini AI has come under fire for scanning private PDF documents in Google Drive without user consent....

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways