- Feb 4, 2016
- 2,520
...quote from the article:
The exploit was reported back in March 2017 as a part of Google's Project Zero program, and was actually fixed in June's Patch Tuesday - according to Microsoft. This fix was delivered after Microsoft requested an extension past Google's standard 90-day deadline. However, Google now states that the issue wasn't fixed correctly, and as such, the bug has been made public again. According to the company, Microsoft has confirmed this as well.
Google says that Microsoft has informed it that the vulnerability can be reproduced on machines running on Windows 7 through Windows 10. A fix is expected in next month's Patch Tuesday or in August. Until then, the severity of the exploit has been marked as "Medium".