3 ms·

It's an actively exploited critical vulnerability that allows sandbox bypasses (Chrome, etc). https://security.googleblog.com/2016/10/disclosing-vulnerabilitie

by mtgx 10y ago

It's an actively exploited critical vulnerability that allows sandbox bypasses (Chrome, etc). https://security.googleblog.com/2016/10/disclosing-vulnerabilities-to-protect.html https://security.googleblog.com/2016/10/disclosing-vulnerabi... I would certainly hope it doesn't take Microsoft 3 months to fix it.

rurban 10y ago
Exactly. If it's already out in the wild, being used, it's critical. venturebeat/microsoft have no idea what they are complaining about. users are already at risc and the vendor has to publish at least some sort of advice. The explanation of this policy is https://security.googleblog.com/2013/05/disclosure-timeline-for-vulnerabilities.html https://security.googleblog.com/2013/05/disclosure-timeline-... I believe Microsoft should have recommended a short term recommendation to mitigate this risk until a patch is available. Such as "Don't connect to the internet...", but instead they recommended to use Windows 10, which does not help at all. Windows 10 is actively exploited this way.