Google reveals another security vulnerability in Windows 10 system before it is fixed

Yesterday we told you that Google revealed a vulnerability in the Microsoft Edge browser, although Microsoft has not yet fixed this vulnerability. Now Google has revealed another security vulnerability in Windows 10 this time that has not yet been fixed by Microsoft.

The Google Project Zero team has detected a new security vulnerability in Windows 10 that Microsoft has not yet fixed. Typically, Google detects the security vulnerabilities it detects in other companies' software 90 days after giving details of the company's vulnerability.



As a result, Google has revealed the vulnerability in Windows 10 now that a report was submitted to Microsoft in November last year, but the latter did not fix this vulnerability within 90 days granted by Google Inc. to repair companies gaps Security that you discover in affiliate software.

The vulnerability discovered by Google in Windows 10 is a rather critical security vulnerability that allows the average user to gain administrator privileges. Microsoft describes this vulnerability as "important" but "not very critical" because it can not be exploited remotely. However, this does not mean that it is not important to issue a fix for this vulnerability because an attacker could exploit this vulnerability by implementing unknown remote code to obtain administrator privileges in Windows 10.

Currently, we can not say with certainty how long it will take Microsoft before issuing the fix for this vulnerability, knowing that the company has not yet fixed the previous vulnerability revealed by Google in the Microsoft Edge browser.

Source