Positive Security company blog
Windows 10 RCE: The exploit is in the link
Chaining a misconfiguration in IE11/Edge Legacy with an argument injection in a Windows 10/11 default URI handler and a bypass for a previous Electron patch, we developed a drive-by RCE exploit for Windows 10. The main vulnerability in the ms-officecmd URI handler has not been patched yet and can also be triggered…
- Points
- 131
- HN comments
- 56
- Submissions
- 1
- Cited by
- 0 commenters
Security & PrivacySystems & Performance2021
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Dec 7, 2021 | Windows 10 RCE: The exploit is in the link by kerm1t | 131 | 56 |
