Hackers at the Google Project Zero team have discovered another critical Windows RCE vulnerability, the worst Windows RCE in recent memory.
Security experts at Google Project Zero team have discovered another critical remote code execution (RCE) vulnerability in Microsoft Windows OS, but this time the hackers defined it asÂ the worst Windows RCE in recent memory.
The popularÂ Google Project Zero hackerÂ Tavis Ormandy announced its discovery during the weekend. The expert alongside with his colleague, the researcher Natalie Silvanovich, discovered the RCE vulnerability in Windows OS.
Ormandy did not provide any further details of the Windows RCE vulnerability because according to the Google bug disclosure the IT giant will give a 90-day security disclosure deadline to any company to solve the problem in their solutions and publicly disclose it.
The experts only revealed the following information on theÂ Windows RCE vulnerability:
- The PoC exploit the Project Zero team has developed works against default Windows installations.
- The Windows RCE vulnerability could be exploited by a remote attacker.
- The attack is âwormable,â capability to spread itself.
If you are interested in the details of theÂ Windows RCE vulnerability discovered by the Project Zero Team, you will have to wait for 90 days.
The Google Project Teamâs disclosure deadline was criticized by many security experts in the past, especially from Microsoft, but Google experts always ignored them.