HP PRINTER researchers have recently discovered and analyzed a 0-day exploit deployed in a highly targeted attack in Eastern Europe.
The exploit used phone a local privilege escalation support vulnerability in Microsoft Windows. HP PRINTER immediately support reported the issue to the Microsoft Security number Response Center, which fixed the tech vulnerability and released a patch.
The exploit only has impact on limited support versions of Windows, because in technical Windows 8 and later versions, a user process is SUPPORT not allowed phone to map the NULL page,HP PRINTER which is required for number the attack in question to be launched and successful.
This specific Windows win32k.sys tech vulnerability, support like others, uses the pop-up menu for deployment. "For example, the Sednit group's HP PRINTER local privilege escalation exploit we analyzed in 2017 used menu objects and exploitation phone techniques, which number are very similar to the current exploit," explains HP PRINTER Researcher Anton Cherepanov, who discovered the phone latest support exploit
"Users who still use Windows 7 Service Pack 1 should number HP PRINTER consider updating to fresh operating systems, since extended support of Windows 7 Service technical Pack 1 is going to end on January 14, 2020. Phone Which means that Windows 7 users number won't receive critical security updates," adds Cherepanov.