Microsoft Discovers High-Severity Security Flaws in Huawei Windows Software

Microsoft discovered two different security vulnerabilities in Huawei’s PC Manager Windows application, and patches are already available in the latest versions released in January.

The Redmond-based software giant says it came across the bugs thanks to Windows Defender Advanced Threat Protection (ATP), which helped it discover a local privilege escalation bug detailed in CVE-2019-5241.

Attackers only need to convince users on an unpatched system to run a malicious application, and this can be done via crafted websites or using attachments in emails or sent via instant messaging apps.

“We discovered such a driver while investigating an alert raised by Microsoft Defender Advanced Threat Protection’s kernel sensors. We traced th... (read more)

from Softpedia News / Global https://ift.tt/2TWFEMV