Windows 10 bug could allow files to be overwritten, researcher shows

A security researcher has released proof-of-concept code for a zero-day exploit in Windows 10. The bug was revealed by SandboxEscaper, a researcher who has exposed Windows vulnerabilities in the past. The latest bug makes it possible to overwrite files with arbitrary data, and while there are numerous criteria that must be met in order for the vulnerability to be exploited, it is still potentially serious. SandboxEscaper warned Microsoft about the problem on Christmas day, before publishing the PoC a couple of days later. See also: Microsoft issues emergency patch to fix serious Internet Explorer zero-day vulnerability Microsoft announces Windows Sandbox,… [Continue Reading]