Security Alert for Windows XP Users
Summary: Microsoft warned Windows XP and Server 2003 users that exploit code had been posted online for a flaw in how the Windows Help and Support Center processes links, allowing attackers to add URLs to a trusted whitelist and trick users into clicking a crafted link that grants fetched files the current user's privileges. Google researcher Tavis Ormandy disclosed the bug five days after privately alerting Microsoft, and Microsoft said Ormandy's hotfix is ineffective and can be easily bypassed while it works on a patch.
What you should know: Microsoft said broad attacks are likely given the public disclosure, and XP users browsing under the default administrator account would hand any fetched file full system rights - a limited user account blocks a large share of attacks and keeps user-level infections from becoming system-wide.
Read the original at Krebs on Security ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026