3 ms·
Such drivers may enable local attacks like the Razer driver issue (one description at https://www.bleepingcomputer.com/news/security/razer-bug-lets-you-become-a
by PeterisP 4y ago
Such drivers may enable local attacks like the Razer driver issue (one description at https://www.bleepingcomputer.com/news/security/razer-bug-lets-you-become-a-windows-10-admin-by-plugging-in-a-mouse/ https://www.bleepingcomputer.com/news/security/razer-bug-let...) since plugging in a particular device (or, really, a cheap USB chip that will fake the proper device IDs) can automatically download & install the vulnerable driver.
- ocdtrekkie 4y agoThis isn't really true: Because it'll download the driver from Windows Update, so it'll serve the latest version. Obviously after the zero day is dealt with that will no longer happen. This is about a flaw that lets someone with admin rights install an old driver which has already been replaced/fixed on Windows Update.