Twitter User Discloses Second Microsoft Zero-Day

The vulnerability can be used to elevate privileges and delete files on target systems.

Twitter user SandboxEscaper has published a Microsoft Windows zero-day flaw on Twitter, along with a proof-of-concept (PoC) on GitHub, for the second time since August.
This vulnerability affects Microsoft Data Sharing, which manages data handled between applications. Security analysts who analyzed the bug say it can be used to elevate privilege after an attacker gains system access.The PoC shows once they have that access, an attacker would be able to eliminate files that typically require administrative privilege to delete.
All versions of Windows 10, including the most recent update, are affected, in addition to Server 2016 and Server 2019, ZDNet reports. The Data Sharing Service (dssvc.dll) does not seem to be present on Windows 8.1 and earlier systems, says Will Dormann, vulnerability analyst at the CERT/CC.
SandboxEscaper also used Twitter to
disclose
a Windows zero-day on Aug. 27. The bug affected the Advanced Local Procedure Call (ALPC) function within the Windows Task Manager in Windows 7 through Windows 10. A local user could use the flaw to gain system privileges.
Two days after the bug was posted on Twitter and its PoC on GitHub, researchers found the exploit in a
campaign
from the PowerPool threat group. Threat actors modified and recompiled the source code to insert their own malware and gain system privileges in targeted attacks.
0Patch
reports
it has issued a micropatch for the bug in fully updated Windows 10 1803 and in Server 2016.
Read more details
here
.

Black Hat Europe returns to London Dec 3-6 2018 with hands-on technical Trainings, cutting-edge Briefings, Arsenal open-source tool demonstrations, top-tier security solutions and service providers in the Business Hall. Click for information on the
conference
and
to register.

Last News
▸ Scan suggests Heartbleed patches may not have been successful. ◂ Discovered: 23/12/2024 Category: security	▸ IoT Devices on Average Have 25 Vulnerabilities ◂ Discovered: 23/12/2024 Category: security	▸ DHS-funded SWAMP scans code for bugs. ◂ Discovered: 23/12/2024 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
Twitter User Discloses Second Microsoft Zero-Day