Google's Project Zero has disclosed a vulnerability in the Microsoft Edge web browser that bypasses the browser's Arbitrary Code Guard (ACG). Project Zero disclosed the bug 14 days after the end of the usual 90-day period, but it apparently wasn't enough time for Microsoft to patch it:
Google's Project Zero initiative tasks its security researchers with finding flaws in various software products developed by the company itself as well as other firms. Back in 2016, it revealed a serious vulnerability present in Windows 10, and reported a "crazy bad vulnerability" in Windows in 2017. Now, the firm has disclosed another security flaw in Microsoft Edge, after the Redmond giant failed to fix it in the allotted time.
[...] According to the Microsoft Security Response Center (MSRC), the problem turned out to be more complex than initially believed, due to which it was given an additional 14-day grace period by Google. Although the company missed this deadline in its February Patch Tuesday too - which forced Google to make the flaw public - Microsoft is confident that it will resolve the issue by March 13, aligning the shipment of the fix with the Patch Tuesday in March.
Also at The Verge and BetaNews.
(Score: 2, Funny) by realDonaldTrump on Tuesday February 20 2018, @04:36PM (4 children)
So many people who have computer, they have it for windows. For solitaire, for so many things. They love the solitaire, so interesting! Great job, Bill! Great job, Satya!
(Score: 3, Funny) by realDonaldTrump on Tuesday February 20 2018, @06:07PM (3 children)
It's a day ending in "Y" so dumb & unfair downmodders are "reading." They're not reading. Because the STORY and the other TWEET are about windows! But I tweet about windows, suddenly it's "OFFTOPIC." Not because of what I wrote. Because of who I am!!!!
(Score: 2) by DannyB on Tuesday February 20 2018, @08:20PM
Microsoft should make new Surface laptops powered by Clean Coal. Beautiful Clean Coal.
People today are educated enough to repeat what they are taught but not to question what they are taught.
(Score: 4, Interesting) by captain normal on Tuesday February 20 2018, @08:27PM (1 child)
The story and TFA are about a vulnerabilkity in MS's Edge brower that was discovered by Google's Project Zero. All the posts up to yours are about that toipic. Your post is not. So to me that seems your post could qualify as "Off topic".
If you were down moded, it probably has nothing to do with who you are (or pretend to be). Likely it was because you didn't contribute to the actual discussion.
When life isn't going right, go left.
(Score: 0) by Anonymous Coward on Wednesday February 21 2018, @06:16AM
Oh man, it's Captain Normal, the arch-nemesis of Donald Trump!