Microsoft confirms a new Windows vulnerability – actively used to infiltrate PCs
Microsoft has confirmed a new remote code exploit, present in all supported Windows versions and used in computer attacks.
Although it does not yet offer security patches to remedy the problem, the company assures that the spread of attacks is low.
Hackers‘ attacks that are not necessarily highly experienced involve a Windows component called Adobe Type Manager Library, which is responsible for uploading fonts used in various Windows applications.
“There are several ways an attacker could exploit the vulnerability, such as persuading a user to open a specially designed document or view it in the Windows Preview pane,” according to Microsoft.
The vulnerability is labeled with the severity level “critical”, the highest rating of the company.
A fix for this vulnerability is expected to be delivered through Windows Update, at the latest on April 14, unless Microsoft decides to speed up the regular Windows update schedule.
