Cyber Risks · Cisco Talos

Rule Release for Today, June 10th, 2010

Summary: Cisco Talos released rules on June 10, 2010, for a Microsoft Help and Support Center bypass vulnerability. The flaw is a programming error that may let a remote attacker bypass security restrictions when invalid hex-encoded characters are used as a parameter to a search query using the hcp:// URI schema.

Why it matters: A remote attacker could bypass security restrictions on an affected system through a crafted hcp:// search query, so any organization still running the unpatched Help and Support Center carried that exposure until the rules or a fix were applied.

Read the original at Cisco Talos ↗

Topics
Supply Chain & AppSec
Related
Kitesurf is now open source Cyber Risks · Nov 13, 2026