Microsoft Patches Windows 10 Zero Day Vulnerability
In a Cumulative Update this week, Microsoft dealt with a Windows 10 vulnerability first reported by Kaspersky in August. The Russian security firm said the flaw was being exploited for targeted attacks in the Middle East. In its release notes this week, Microsoft explains the Win32k Elevation of Privilege Vulnerability (CVE-2018-8453) and the update to patch it: “An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory....