{"id":140110,"date":"2019-05-28T20:56:17","date_gmt":"2019-05-28T20:56:17","guid":{"rendered":"http:\/\/sftarticles.wpenginepowered.com\/en\/?p=140110"},"modified":"2025-07-01T21:53:06","modified_gmt":"2025-07-02T04:53:06","slug":"windows-10-new-vulnerability-found","status":"publish","type":"post","link":"https:\/\/cms-articles.softonic.io\/en\/windows-10-new-vulnerability-found\/","title":{"rendered":"Windows 10: New vulnerability found"},"content":{"rendered":"

\"Warning<\/p>\n

Zero-day vulnerabilities are potential security weak points found in programs after they\u2019ve been released. Obviously, the program developers are unaware of the vulnerabilities, so it is often third parties who discover them and then share their findings so that they can be closed up by the developers in question. We\u2019ve reported a couple of times on Google\u2019s dedicated zero-day hunting team and the bugs they\u2019ve found<\/a>.<\/p>\n

A new zero-day vulnerability has been discovered in Windows 10 that could lead to a malicious attack<\/h2>\n

According to a report by ZDNet<\/a>, the new vulnerability was discovered by security researcher SandboxEscaper. The vulnerability relates to Windows Task Scheduler but is unable to take control of a victim\u2019s computer alone. However, if it is used in conjunction with other nefarious methods it could prove very harmful to the victim\u2019s online security. When done so, the vulnerability allows the hacker to run a specific .job file within Task Scheduler to grant admin privileges.<\/strong><\/p>\n

\"zero
Image via: ZDNet<\/a><\/figcaption><\/figure>\n

SandboxEscaper published the details and code of the vulnerability to GitHub<\/a>, without notifying Microsoft. This means there is still no official word on when a patch for the exploit will be available. As to whether it is responsible behavior to publish a vulnerability, including code and demonstration video, online without first notifying the developers that could close it off is for you to decide. Hackers now know of this vulnerability and we now have to wait for Microsoft to patch it.<\/strong><\/p>\n

\n

Researcher also released a demo video of the LPE zero-day in action. See below: pic.twitter.com\/ZX8XWLQ74z<\/a><\/p>\n

\u2014 Catalin Cimpanu (@campuscodi) May 22, 2019<\/a><\/p><\/blockquote>\n

This isn\u2019t the first time SandboxEscaper has acted in this way either. According to the same ZDNet report, she released four other Windows zero-day vulnerabilities in the same manner last year. Three of these were patched by Microsoft without any problems but one of them was used in active malware campaigns for weeks after its release.<\/p>\n

It took Microsoft between one or two months to patch the four vulnerabilities SandboxEscaper published in 2018 which means there will be a lot of pressure at Microsoft HQ, if the software giant wants to fix this latest vulnerability in time for its next scheduled patch on Tuesday, June 11. Microsoft has two weeks if it wants to hit that deadline.<\/p>\n

\r\n

Read more<\/p>\r\n

\r\n \r\n
\r\n
\r\n
<\/div>\r\n <\/div>\r\n
\r\n

New scam spotted on the Google Play Store \u25ba<\/p>\r\n <\/div>\r\n <\/div>\r\n <\/a>\r\n \r\n

\r\n
\r\n
<\/div>\r\n <\/div>\r\n
\r\n

Security alert: new Netflix phishing scams \u25ba<\/p>\r\n <\/div>\r\n <\/div>\r\n <\/a>\r\n <\/div>\r\n

\r\n \r\n
\r\n
\r\n
<\/div>\r\n <\/div>\r\n
\r\n

This ingenious phishing scam is targeting iPhone users \u25ba<\/p>\r\n <\/div>\r\n <\/div>\r\n <\/a>\r\n \r\n

\r\n
\r\n
<\/div>\r\n <\/div>\r\n
\r\n

New year, new scams: what to watch out for in 2019 \u25ba<\/p>\r\n <\/div>\r\n <\/div>\r\n <\/a>\r\n <\/div>\r\n<\/div>\n

So, who exactly is vulnerable to this potential exploit? It has only been confirmed so far on Windows 10 32-bit systems but it is believed, however, that, in theory at least, it could be adapted to work on all Windows systems<\/strong> all the way back to Windows XP and Server 2003.<\/p>\n

When a hacker gains administrative privileges over a system it gives them complete access<\/strong> to everything on it. This potential vulnerability should be taken seriously, but all we can do for now is hope that Microsoft gets a patch out before hackers start trying to exploit it.<\/p>\n

\r\n

More about Windows 10<\/p>\r\n

\r\n \r\n
\r\n
\r\n
<\/div>\r\n <\/div>\r\n
\r\n

How to start Windows 10 in safe mode \u25ba<\/p>\r\n <\/div>\r\n <\/div>\r\n <\/a>\r\n \r\n

\r\n
\r\n
<\/div>\r\n <\/div>\r\n
\r\n

How to turn on Bluetooth in Windows 10 \u25ba<\/p>\r\n <\/div>\r\n <\/div>\r\n <\/a>\r\n <\/div>\r\n

\r\n \r\n
\r\n
\r\n
<\/div>\r\n <\/div>\r\n
\r\n

Windows 10 has a new free Microsoft Office app \u25ba<\/p>\r\n <\/div>\r\n <\/div>\r\n <\/a>\r\n \r\n

\r\n
\r\n
<\/div>\r\n <\/div>\r\n
\r\n

Microsoft\u2019s latest trick to get you to upgrade to Windows 10 \u25ba<\/p>\r\n <\/div>\r\n <\/div>\r\n <\/a>\r\n <\/div>\r\n<\/div>\n","protected":false},"excerpt":{"rendered":"

A new zero-day vulnerability has been discovered in Windows 10 that could lead to a malicious attack.<\/p>\n","protected":false},"author":9073,"featured_media":140122,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","wpcf-pageviews":0},"categories":[1015],"tags":[2351,1027,1080,1052],"usertag":[839],"vertical":[],"content-category":[],"class_list":["post-140110","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-app-subdomain-redirectionwindows-10","tag-security","tag-windows","tag-windows-10","usertag-vpn"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/140110","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/users\/9073"}],"replies":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/comments?post=140110"}],"version-history":[{"count":1,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/140110\/revisions"}],"predecessor-version":[{"id":325971,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/140110\/revisions\/325971"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media\/140122"}],"wp:attachment":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media?parent=140110"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/categories?post=140110"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/tags?post=140110"},{"taxonomy":"usertag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/usertag?post=140110"},{"taxonomy":"vertical","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/vertical?post=140110"},{"taxonomy":"content-category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/content-category?post=140110"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}