Microsoft spots security flaw in Google Chrome that hackers can exploit

According to an Engadget report on Friday, Google immediately posted the fix for the remote flaw on GitHub

Microsoft, Google sign up for EU-US Privacy Shield
IANS San Francisco
Last Updated : Oct 20 2017 | 1:58 PM IST

Microsofts Windows security team has discovered a remote security flaw in Google Chrome that can be exploited by hackers.

"Our discovery of 'CVE-2017-5121' indicates that it is possible to find remotely exploitable vulnerabilities in modern browsers. Chrome's relative lack of remote code execution (RCE) mitigations means the path from memory corruption bug to exploit can be a short one," wrote Jordan Rabet, member of the Microsoft Offensive Security Research team, in a blog post late on Thursday.

"Chrome's process for servicing vulnerabilities can result in the public disclosure of details for security flaws before fixes are pushed to customers," Rabet added.

According to an Engadget report on Friday, Google immediately posted the fix for the remote flaw on GitHub.

"While the fix for this issue doesn't out the vulnerability, according to Microsoft, that hasn't always been the case. Microsoft believes that a fix should be applied before they are public knowledge," the report added.

The Microssoft-Google rivalry over security flaws in their products is not new.

Last year, Google disclosed a major Windows bug before Microsoft was ready to patch it.

"It irritated the company so much that Windows chief Terry Myerson authored a blog post criticising Google for not disclosing security vulnerabilities responsibly," The Verge reported.

After testing the latest Windows 10 "Fall Creators Update" over the past six months, Microsoft has now released the latest edition to secure over 500 million Windows 10 devices globally, starting with new machines first.

Microsoft wants users to keep their software up to date in order to avoid another series of deadly cyber attacks such as WannaCrypt that impacted worldwide PCs that were running an outdated Microsoft software.

Two new ransomware families like "WannaCrypt" and "Petya" targeted dated Windows operating systems and created havoc across the world, including at some places in India.

Now, with the official rollout of Windows 10 "Fall Creators" update, Microsoft wants to stay one step ahead in identifying and preventing security threats.

*Subscribe to Business Standard digital and get complimentary access to The New York Times

Smart Quarterly

₹900

3 Months

₹300/Month

SAVE 25%

Smart Essential

₹2,700

1 Year

₹225/Month

SAVE 46%
*Complimentary New York Times access for the 2nd year will be given after 12 months

Super Saver

₹3,900

2 Years

₹162/Month

Subscribe

Renews automatically, cancel anytime

Here’s what’s included in our digital subscription plans

Exclusive premium stories online

  • Over 30 premium stories daily, handpicked by our editors

Complimentary Access to The New York Times

  • News, Games, Cooking, Audio, Wirecutter & The Athletic

Business Standard Epaper

  • Digital replica of our daily newspaper — with options to read, save, and share

Curated Newsletters

  • Insights on markets, finance, politics, tech, and more delivered to your inbox

Market Analysis & Investment Insights

  • In-depth market analysis & insights with access to The Smart Investor

Archives

  • Repository of articles and publications dating back to 1997

Ad-free Reading

  • Uninterrupted reading experience with no advertisements

Seamless Access Across All Devices

  • Access Business Standard across devices — mobile, tablet, or PC, via web or app

More From This Section

First Published: Oct 20 2017 | 1:57 PM IST

Next Story