Google finds a “crazy bad” Windows exploit, demands fix in 90 days or else

1 min. read

Published onMay 8, 2017

published onMay 8, 2017

Share this article

Read our disclosure page to find out how can you help Windows Report sustain the editorial teamRead more

Google has been making it a habit ofsetting a fire under Microsoft’s security team. Often, its Project Zero researchers will find issues and report them to Microsoft to repair. If a fix doesn’t go up within a time limit, the vulnerabilities will be published in a public report. Today, Travis Ormandy announced on Twitter that Google has found “the worst” so far (viaHacker News.)

Ormandy didn’t divulge much more information about the Windows remote code execution besides that it is “crazy bad”, potentially spelling trouble for Microsoft. He continued to explain that attacks against the vulnerability worked against the default install, didn’t need to be on the same LAN, and it’s wormable meaning it can spread. His tweets also came with some complimentary fire emojis, just in case readers weren’t worried enough.

Attack works against a default install, don’t need to be on the same LAN, and it’s wormable. ????

— Tavis Ormandy (@taviso)May 6, 2017

Once the report is sent to the tech giant, they will be given a 90-day leniency to correct the issue before Google goes public and it becomes an even bigger problem.

Radu Tyrsina

Radu Tyrsina has been a Windows fan ever since he got his first PC, a Pentium III (a monster at that time).

For most of the kids of his age, the Internet was an amazing way to play and communicate with others, but he was deeply impressed by the flow of information and how easily you can find anything on the web.

Prior to founding Windows Report, this particular curiosity about digital content enabled him to grow a number of sites that helped hundreds of millions reach faster the answer they’re looking for.

User forum

0 messages

Sort by:LatestOldestMost Votes

Comment*

Name*

Email*

Commenting as.Not you?

Save information for future comments

Comment

Radu Tyrsina

With KB5043178 to Release Preview Channel, Microsoft advises Windows 11 users to plug in when the battery is low#

Copilot in Outlook will generate personalized themes for you to customize the app#

Microsoft will raise the price of its 365 Suite to include AI capabilities#

Death Stranding Director’s Cut is now Xbox X|S at a huge discount#

Outlook will let users create custom account icons so they can tell their accounts apart easier#

Google finds a “crazy bad” Windows exploit, demands fix in 90 days or else#

With KB5043178 to Release Preview Channel, Microsoft advises Windows 11 users to plug in when the battery is low

Copilot in Outlook will generate personalized themes for you to customize the app

Microsoft will raise the price of its 365 Suite to include AI capabilities

Death Stranding Director’s Cut is now Xbox X|S at a huge discount

Outlook will let users create custom account icons so they can tell their accounts apart easier

Google finds a “crazy bad” Windows exploit, demands fix in 90 days or else