Flaw in Windows and Adobe Flash Puts Users At Risk of Losing Control

It’s been reported that there is another flaw in Windows and it is actively being exploited. Google researchers reported a flaw that could allow an attacker to bypass the sandbox features of Windows and get administrator privileges. From there, the attacker can do pretty much anything he or she wants on your computer.

 

This particular exploit uses a flaw in the Adobe Flash media player to execute. Adobe has issued a fix for its part that should be applied right away if you have not done so. However, although the researchers said they notified Windows about this over a week before reporting it, Microsoft has not yet issued a patch for Windows. In the meantime, be sure to update the Flash media player and it’s possible that you will be protected, although not completely clear. Some say it can still be exploited outside the browser and therefore outside of Adobe Flash.

 

You can get the latest updates by going to Adobe’s website directly. This will ensure it’s a legitimate update and not a scammer popping up random windows on your computer making you think it’s real. Popup fatigue catches a lot of people out these days. There are so many things showing up on our screens that it can get frustrating.  Some may find it quicker and easier to just click the affirmative button and move on. However, that is a dangerous choice. Cyber criminals will use these methods to get malware onto computers. So always pay attention to what’s in the popup window and click to close it rather than choosing either button. If there is no close option, it could be malware just waiting to be let lose. If this is the case, close your browser. Then shut your computer completely down and restart it.

 

 

For this current issue, Google said it’s Chrome browser is no longer vulnerable and can be safely used for browsing.

 

 

The sandbox normally allows only permissions at the user level to execute. However, this bug goes around that to get administrator rights. Until Microsoft does issue a patch, avoid using Internet Explorer completely. The company has said the Edge browser is an alternative, but it is not clear if it is vulnerable to this or not. Therefore, it’s recommended to avoid any Microsoft browser for the time being. With any luck, they will get a patch released in the next Tuesday patch update group. If you see a legitimate Microsoft notification that a patch is available, apply it right away.