News for hackers. Stuff that matters.

A comment on Windows code-execution zeroday is under active exploit, Microsoft warns. Parent comment

Re:Windows code-execution zeroday is under active exploit, M... by lostmsu on Tuesday March 24, 2020 @02:07AM (#22672416)
X.org: https://www.cvedetails.com/cve/CVE-2018-14600/

MacOS: https://blog.talosintelligence.com/2016/07/apple-image-rce.h...

What do you use?

[ Parent | on HN ]
Re:Windows code-execution zeroday is under active exploit, M... by upofadown on Tuesday March 24, 2020 @07:39AM (#22673995)
The X.org one is only technically RCE in practice as you need an authenticated connection to the X server. It is really more of a local privilege escalation for the case where the X server is running as root.
[ Parent | on HN ]