..."The vulnerable driver ships with every version of Windows, up to and including Server 2025," Adam Barnett, lead software engineer at Rapid7, said. "Maybe your fax modem uses a different chipset, and so you don't need the Agere driver? Perhaps you've simply discovered email? Tough luck. Your PC is still vulnerable, and a local attacker with a minimally privileged account can elevate to administrator."...

you are viewing a single comment's thread
view the rest of the comments
[–] 24 points 1 year ago (1 child)

But it would be weird to call something a "zero-day" if it wasn't being exploited. Like if I discover a vuln, it shouldn't be considered a zero-day, even if I report it, if I'm not exploiting it in the wild.

  • source
  • parent
  • hideshow 1 child comment