Security Researcher Uncovers New Windows Zero-day Exploit

Share post:

Security researcher Abdelhamid Naceri recently discovered a new Windows zero-day local privilege elevation vulnerability that allows admin privileges in various Windows operating systems.

The vulnerability affects all versions of Windows including Windows 10, 11, and Windows Server 2022. With the vulnerability in the wrong hands, threat actors with limited access to a compromised device can use it to increase their privileges to spread to any tentacle within the system or network.

Naceri explained how the bug works with his proof-of-concept exploit: “This variant was discovered during the analysis of CVE-2021-41379 patch. the bug was not fixed correctly, however, instead of dropping the bypass. I have chosen to drop this variant as it is more powerful than the original one.”

In another revelation, Naceri pointed out that it is possible to prevent ‘Standard’ users from performing MSI installation operations by configuring group policies.

For more information, read the original story in Bleeping Computer.



Related articles

Cyber Security Today, March 22, 2023 – ChatGPT4 is out, poorly-protected Linux servers are exploited, and more

ChatGPT4 is out, poorly-protected Linux servers are exploited, and more. Welcome to Cyber Security Today. It’s Wednesday, March 22nd, 2023. I’m Howard Solomon, contributing reporter on cybersecurity for and in the U.S. The new version of ChatGPT has been released. But if you were hoping that version 4 has made this tool safer

Only 9 per cent of Canadian firms are cyber mature: Cisco report

Only 15 per cent of companies around the world would have a mature cyber readiness, according to survey

Ferrari notifies customers of ransom demand

Exclusive car maker says some client contact information exposed in cy

Government backs down on document demand from Google, Facebook

Change meets criticism that demand for external communications is an invasion

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways