Positive Security

Positive Security is a Berlin based IT security consultancy and research collective.

Popular posts: 5
Total points: 1,389
HN comments: 609
Rank: #916 company

Visit positive.security → RSS feedOn Hacker News May 2021 – Feb 2022

Security & Privacy 5 Hardware & Electronics 2 Systems & Performance 1 Tech Industry & Business 1 AI & Machine Learning 1

Most points Most discussed Most cited Newest

Windows 10 RCE: The exploit is in the link

2021131 points56 comments Security & Privacy details

Chaining a misconfiguration in IE11/Edge Legacy with an argument injection in a Windows 10/11 default URI handler and a bypass for a previous Electron patch, we developed a drive-by RCE exploit for Windows 10. The main vulnerability in the ms-officecmd URI handler has not been patched yet and can also be triggered…