Microsoft: 70 percent of all security bugs are memory safety issues

Lyx · Feb 11, 2019

Around 70 percent of all the vulnerabilities in Microsoft products addressed through a security update each year are memory safety issues; a Microsoft engineer revealed last week at a security conference. (...)

The reason for this high percentage is because Windows has been written mostly in C and C++, two "memory-unsafe" programming languages that allow developers fine-grained control of the memory addresses where their code can be executed. One slip-up in the developers' memory management code can lead to a slew of memory safety errors that attackers can exploit with dangerous and intrusive consequences --such as remote code execution or elevation of privilege flaws.

Memory safety errors are today's biggest attack surface for hackers, and attackers appear to be capitalizing on their availability. According to Miller's presentation, use after free and heap corruption vulnerabilities continue to be the preferred bugs when attackers are developing exploits.
Click to expand...

https://www.zdnet.com/article/microsoft-70-percent-of-all-security-bugs-are-memory-safety-issues/

ronjor · Feb 11, 2019

Posted here. Thanks. https://www.wilderssecurity.com/thr...rred-patches-not-so-much.413182/#post-2808230

Log in or Sign up

Microsoft: 70 percent of all security bugs are memory safety issues

Lyx Registered Member

ronjor Global Moderator

Log in or Sign up

Microsoft: 70 percent of all security bugs are memory safety issues

Lyx Registered Member

ronjor Global Moderator

Useful Searches