Windows kernel zero-day vulnerability used in targeted attacks

guest · Oct 30, 2020

Windows kernel zero-day vulnerability used in targeted attacks
October 30, 2020
https://www.bleepingcomputer.com/ne...o-day-vulnerability-used-in-targeted-attacks/

Project Zero, Google's zero-day vulnerability hunting team, today disclosed a zero-day vulnerability in the Windows kernel and actively exploited in targeted attacks.

The flaw is a pool-based buffer overflow that exists in the Windows Kernel Cryptography Driver (cng.sys) and it is currently tracked as CVE-2020-17087.
Proof of concept exploit available
The Windows kernel bug zero-day can be exploited by local attackers for privilege escalation (including sandbox escape) according to Project Zero security researchers Mateusz Jurczyk and Sergei Glazunov.

"The bug resides in the cng!CfgAdtpFormatPropertyBlock function and is caused by a 16-bit integer truncation issue," the researchers explain.
Click to expand...

"Currently we expect a patch for this issue to be available on November 10," said Ben Hawkes, technical team lead of Google's Project Zero security research team.
Even though the bug was added to the Project Zero issue tracker only 8 days ago, it was disclosed after only 7 days because it was being used by attackers in the wild.
Click to expand...

Log in or Sign up

Windows kernel zero-day vulnerability used in targeted attacks

guest Guest

Log in or Sign up

Windows kernel zero-day vulnerability used in targeted attacks

guest Guest

Useful Searches