…“The vulnerable driver ships with every version of Windows, up to and including Server 2025,” Adam Barnett, lead software engineer at Rapid7, said. “Maybe your fax modem uses a different chipset, and so you don’t need the Agere driver? Perhaps you’ve simply discovered email? Tough luck. Your PC is still vulnerable, and a local attacker with a minimally privileged account can elevate to administrator.”…

  • Paul Sutton (zleap)@techhub.social
    link
    fedilink
    arrow-up
    2
    arrow-down
    17
    ·
    20 hours ago

    @SnotFlickerman

    So will MS leave people in the lurch or issue an emergency patch? The former will drive people straight to replacements and the community need to be like a predator ready to move in to injured prey.

    If we don’t it will be a massive opportunity lost.

    • Snot Flickerman@lemmy.blahaj.zone
      link
      fedilink
      English
      arrow-up
      23
      arrow-down
      1
      ·
      edit-2
      20 hours ago

      The patch has already been released, that’s literally my point. It was part of their final patches released for Windows 10 yesterday.

      This is from the CVE page for the exploits discussed in the srticle.