Microsoft is facing a fair amount of backlash after Google released an exploit that is related to Windows 8.1. From what we understand, Google via its Project Zero team, found the exploit and gave Microsoft 90 days to fix it before releasing it to the public.
Unfortunately, Microsoft did not fix the issue in time, and thus Google was forced to release it to the public. This should force the software giant to make haste in publishing a fix as soon as possible, not to mention; it looks bad on the company right now.
What’s the exploit all about?
Well, it allows a local user of a machine to gain administrator privileges, and after that, they can do whatever they want. While this doesn’t mean hackers would be able to use the exploit to take over a person’s machine, it should be viewed as an enormous problem nonetheless, for anyone with access locally can get administrator rights, and from there they do pretty much anything to the user’s computer.
As expected, Microsoft did not sit idly by and recently released a statement on the matter. From what we can tell, the company isn’t taking the exploit very seriously, hence the reason it is taking the software giant so long to release a fix to the public domain.
“We are working to release a security update to address an Elevation of Privilege issue. It is important to note that for a would-be attacker to potentially exploit a system, they would first need to have valid logon credentials and be able to log on locally to a targeted machine,” says Microsoft in a statement. “We encourage customers to keep their anti-virus software up to date, install all available Security Updates and enable the firewall on their computer.”
We have tested the exploit and can confirm that it works, so hopefully Microsoft releases a fix as soon as possible.
Interestingly enough, many person’s are going against Google for releasing the exploit to the public since Windows 8.1 is used by millions around the world. They view the move is irresponsible while some sees it as a ploy by the search giant to rattle Microsoft.