Microsoft Uncovers Austrian Company Exploiting Windows and Adobe Zero-Day Exploits

A cyber mercenary that "ostensibly sells general security and information analysis services to commercial customers" used several Windows and Adobe zero-day exploits in limited and highly-targeted attacks against European and Central American entities. The company, which Microsoft describes as a...

CVE-2021-36948 Windows Update Medic Service Elevation of Privilege Vulnerability

...

CVE-2020-17070

Windows Update Medic Service Elevation of Privilege Vulnerability...

Privilege escalation

Windows Update Medic Service Elevation of Privilege Vulnerability...

CVE-2020-17070 Windows Update Medic Service Elevation of Privilege Vulnerability

...

PT-2020-4607 · Microsoft · Windows Update Medic Service +1

Name of the Vulnerable Software and Affected Versions: Windows Update Medic Service affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Update Medic Service component of the Windows operating system. This can be exploited to allow a...