News for hackers. Stuff that matters.

A comment on Windows 0day privilege escalation still not fixed. Parent comment

Re:Windows 0day privilege escalation still not fixed by q3k on Wednesday December 23, 2020 @01:26PM (#25520469)
I assume it's bigcorp slowness, having to roll up all updates into patch batches, following release schedules, testing against all release trains, going through QA, etc. No accelerated way to push critical, but trivial software fixes.
[ Parent | on HN ]
Re:Windows 0day privilege escalation still not fixed by foepys on Wednesday December 23, 2020 @02:03PM (#25520859)
Last year they pushed some "simple" fixes fast and broke quite a few older VB applications. That was quite a fun day at my office when some customers couldn't work anymore...
[ Parent | on HN ]
Re:Windows 0day privilege escalation still not fixed by dmix on Wednesday December 23, 2020 @03:41PM (#25521965)
This is interesting do you have more details you could share or point to a link?
[ Parent | on HN ]
Re:Windows 0day privilege escalation still not fixed by foepys on Thursday December 24, 2020 @12:11AM (#25525220)
https://www.zdnet.com/article/microsoft-these-windows-10-upd...

https://answers.microsoft.com/en-us/msoffice/forum/all/windo...

[ Parent | on HN ]
Re:Windows 0day privilege escalation still not fixed by the8472 on Wednesday December 23, 2020 @01:57PM (#25520806)
MS can and does issue out of schedule patches every now and then. This presumably doesn't meet the bar since it only is a local privesc.
[ Parent | on HN ]
Re:Windows 0day privilege escalation still not fixed by Retric on Wednesday December 23, 2020 @01:47PM (#25520695)
Microsoft has patched issues fairly quickly in the past. This may be a “critical” issue, but I think they have even higher internal classifications which this doesn’t qualify for.
[ Parent | on HN ]