Windows local EOP 0-day details patch is not available. I am a big proponent of timely disclosure and full details but I honestly do not see how this level of detail at this time is advantageous to anyone except attackers. Am I missing something?https://twitter.com/ProjectZeroBugs/status/1322208059721084929 …
-
Well, the boundary have moved closer to not a security boundary after the bounties have been lovered to 2000$ 0 if: using junction folder, mem corrupts by race condition or is com. You could take that as a white flag and it has been decided the boundary is not worth protecting
There will anytime always be plenty of EOP vulnerabilities and everyone should plan accordingly.
