Tuesday, February 20, 2018

Microsoft Edge vulnerability exposed as Microsoft misses Google's Project Zero disclosure deadline

The vulnerability, while not severe, allows a workaround for Edge's Arbitrary Code Guard (ACG), a built-in security measure. Researcher Ivan Fratric was able to load unsigned code into memory from a malicious website accessed via Edge. Once an attacker knows about that memory, they could pop ...

from Google Alert - vulnerability http://ift.tt/2BEJvUE
via IFTTT

No comments:

Post a Comment