We'd like to thank Ricardo Narvaja (@ricnar456) of @_CoreImpact for sharing their research and POC, which allowed us to create a micropatch. https://t.co/HirB9EasnK
As a side note, we found Microsoft's patch for this issue is flawed and still allows for a similar command injection exploit. We reported this to MSRC and will not release details until a proper official patch is in place.
We'd like to thank Ryan Yager (https://t.co/krKWtbpPc6) for sharing their proof-of-concept, which allowed us to create patches for Windows versions that are no longer receiving official updates from Microsoft.
Using Windows 10 22H2 with Extended Security Updates, which ended their 1st year this week and cost twice as much to renew for another year? Now is a good time to switch to 0patch - no reboots, no hassle, much lower cost! https://t.co/cCqeTj3BLq
We'd like to thank @SecuriTeam_SSD for sharing their technical analysis, which allowed us to create patches for Windows versions that are no longer receiving official updates from Microsoft.
Yesterday's patches were the last ever official security patches for Windows Sever 2012 and 2012 R2. If you want to keep using these server versions securely, it's time to switch to 0patch and start receiving our security patches for years to come. https://t.co/IfSjloIDGb
We'd like to thank Nicolas Alejandro Malizia (https://t.co/kgAZYf2CQR) and Joaquín Grassi (https://t.co/rKMiXc1VAI) for sharing their proof-of-concept, which allowed us to create patches for Windows versions that are no longer receiving official updates from Microsoft.
We'd like to thank David Carliez (https://t.co/0E39fTGBDz) for sharing their write-up and proof-of-concept, which allowed us to create patches for Windows versions that are no longer receiving official updates from Microsoft.
We'd like to thank David Carliez (https://t.co/0E39fTG3O1) for sharing their proof-of-concept, which allowed us to create patches for Windows versions that are no longer receiving official updates from Microsoft.
We'd like to thank Jeongmin Choi (https://t.co/w60x0p91JU) with S2W (https://t.co/iWDxraFQ6i) for sharing their analysis, which allowed us to create patches for Office versions that are no longer receiving official updates from Microsoft.
We'd like to thank Shai Laron (https://t.co/FzV9653IfP) with @SemperisTech sharing their analysis and POC, which allowed us to create patches for Windows versions that are no longer receiving official updates from Microsoft.