Tech »  Topic »  Microsoft's Patch for Symlink Vulnerability Introduces New Windows Denial-of-Service Flaw

Microsoft's Patch for Symlink Vulnerability Introduces New Windows Denial-of-Service Flaw


Non-admin (and admin) users can create junction points in c:\
  • Permanent Update Block: Systems with the malicious symlink will remain unpatched indefinitely, exposing them to known exploits.
  • Low Barrier to Exploit: Attackers or malicious insiders need only basic user access to trigger the flaw.
  • No Official Fix Yet: Microsoft has not acknowledged the issue publicly, despite Beaumont reporting it to the Microsoft Security Response Center (MSRC) two weeks ago.

Copyright of this story solely belongs to gbhackers . To see the full text click HERE