Re:Google reports “high-severity” bug in Edge/IE
by fagnerbrack on Wednesday March 15, 2017 @07:27AM
(#13875337)
Not sure if there's a patch available now, but Microsoft not responding to it makes me wonder if they really care about security in their browsers...
[ Parent
| on HN ]
Re:Google reports “high-severity” bug in Edge/IE
by ocdtrekkie on Wednesday March 15, 2017 @08:11AM
(#13875514)
This was fixed yesterday in the cumulative update for March. (See the Project Zero thread.)
The only reason the timeline ended up exceeded was Microsoft canceled last month's release.
Re:Google reports “high-severity” bug in Edge/IE
by na85 on Wednesday March 15, 2017 @07:51AM
(#13875441)
There's been some speculation that they're all-hands-on-deck trying to respond to the vault7 leaks and implications thereof, and thus these vulns are left to rot on the vine.
Re:Google reports “high-severity” bug in Edge/IE
by martinknafve on Wednesday March 15, 2017 @08:23AM
(#13875576)
I reported an issue a week ago and they have had developers verifying it beginning of this week. And that was a low impact bug. The previous issue I reported took 4 months to be verified and then another 3 to be patched. So my view at least is that not everyone is handling leaks.