Experts at 0patch released a micropatch to temporary fix a still-unpatched local privilege escalation on systems without rebooting them.
The following video shows how the
The exploit published by the expert triggers the flaw that resides in the Task Scheduler of Windows 10.
SandboxEscaper discovered that even starting with limited privileges it is possible to get SYSTEM rights by invoking a specific function. SandboxEscaper published a video PoC of the Windows zero-day that shows how to trigger it on Windows x86.
Will Dormann, vulnerability analyst at CERT/CC, confirmed that the Windows zero-day works on a fully patched (May 2019) Windows 10 x86 system.
According to Will Dormann, a vulnerability analyst at CERT/CC, the exploit is 100% reliable on x86 systems and needs to be recompiled for x64 machines.
The micropatch prevents changing the set of permissions a normal user has over a system file.
If you appreciate my effort in spreading cybersecurity awareness, please vote for Security Affairs in the section “Your Vote for the Best EU Security Tweeter”