News

Google Researcher Publishes Unpatched Windows 8.1 Security Vulnerability

Usually, found security exploits are reported before publicised and so was MSRC-20544 exploit for Windows 8.1. But 90 days after the security researcher from Google had reported the flaw to Microsoft, it still wasn’t patched and he instead chose to release the information to the public in order to pressure Microsoft to act and fix the flaw.

Besides just disclosing the flaw, he also shows how to use it and according to feedback it works. The vulnerability allows for an elevation of privilege in ahcache.sys/NtApphelpCacheControl and the blog post also provides a demo application that can launch calc.exe using the exploit. It was only tested on Windows 8.1 and it is not known if prior versions of Windows are affected as well.

Microsoft issued the following response to the vulnerability:

“We are working to release a security update to address an Elevation of Privilege issue. It is important to note that for a would-be attacker to potentially exploit a system, they would first need to have valid logon credentials and be able to log on locally to a targeted machine. We encourage customers to keep their anti-virus software up to date, install all available Security Updates and enable the firewall on their computer.”

So there is a mixture of good and bad news in this exploit. Someone needs to have direct access to your system in order to exploit it and a patch is being worked on. If you’d like to test it on your own system, follow the source link to Google Security where you can find the demo app.

Thanks to Google Security via Neowin for providing us with this information

Bohs Hansen

Disqus Comments Loading...

Recent Posts

Trust Gaming GXT 609 Zoxa 2.0 PC Speakers

SOUNDS GREAT – Full stereo sound (12W peak power) gives your setup a booming audio…

3 hours ago

PowerA Wired Controller for Nintendo Switch

Special Edition Yoshi design Ergonomic controller shape with Nintendo Switch button layout Detachable 10ft (3m)…

3 hours ago

Logitech G Saitek PRO Flight Rudder Pedals

Fluid Motion: These flight rudder pedals are smooth and accurate that enable precise control over…

3 hours ago

Logitech G Saitek Farm Sim Controller

Heavy Equipment Bundle: Includes a steering wheel for heavy machinery, gas and brake pedals, and…

3 hours ago

Razer Ornata V3 X – Low Profile Gaming Keyboard

Low-profile Keys for an ergonomic gaming experience. With slimmer keycaps and shorter switches, enjoy natural…

3 hours ago

Glorious Gaming Model O Wired Gaming Mouse

Size & style: Ambidextrous lightweight mouse for gaming. Built for speed, control and comfort, with…

3 hours ago