3 ms·
> In May, Kaspersky (@oct0xor) discovered CVE-2020-0986 in Windows splwow64 was exploited itw as a 0day. Microsoft released a patch in June, but that patch didn
by zaltekk 6y ago
> In May, Kaspersky (@oct0xor) discovered CVE-2020-0986 in Windows splwow64 was exploited itw as a 0day. Microsoft released a patch in June, but that patch didnt fix the vuln. After reporting that bad fix in Sept under a 90day deadline, it's still not fixed.
https://twitter.com/maddiestone/status/1341781305126612995 https://twitter.com/maddiestone/status/1341781305126612995
- zaltekk 6y agoMore details on the original bug: https://securelist.com/operation-powerfall-cve-2020-0986-and-variants/98329/ https://securelist.com/operation-powerfall-cve-2020-0986-and...
- sedatk 6y ago> 2020-12-03 Microsoft advises that due to issues identified in testing, the fix will now slip to January 2021.