Remote code execution vulnerability present in the Windows Scripting Engine of Microsoft Windows

guest · Sep 18, 2021

Remote code execution vulnerability present in the Windows Scripting Engine of Microsoft Windows
September 16, 2021
https://www.cyber.gov.au/acsc/view-...nt-windows-scripting-engine-microsoft-windows

A vulnerability exists in a component of Microsoft Windows. A malicious cyber actor could exploit this vulnerability to execute arbitrary code, potentially enabling the actor to take control of the vulnerable host.
Background /What has happened?
A vulnerability (CVE-2021-26435) has been identified in the Windows Scripting Engine, a component present in all installations of Microsoft Windows. Through this vulnerability a cyber actor could use a maliciously crafted file to install malware. The file could potentially be in the form of a JScript or VBScript file either by itself or incorporated into a malicious Microsoft Office document. The malicious file would likely be used as part of a spearphishing campaign.
Click to expand...

Mitigation / How do I stay secure?
Microsoft has released security updates to address this vulnerability. Details on these security updates and a full list of affected products are available from Microsoft’s security advisory. Customers should apply these security updates as soon as possible.
Click to expand...

Log in or Sign up

Remote code execution vulnerability present in the Windows Scripting Engine of Microsoft Windows

guest Guest

Log in or Sign up

Remote code execution vulnerability present in the Windows Scripting Engine of Microsoft Windows

guest Guest

Useful Searches