Security-X

Forum Security-X => News => Discussion démarrée par: igor51 le avril 13, 2021, 20:00:18

Titre: [SecList]Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310) used in the wild
Posté par: igor51 le avril 13, 2021, 20:00:18
Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310) used in the wild

CVE-2021-28310 is an out-of-bounds (OOB) write vulnerability in dwmcore.dll, which is part of Desktop Window Manager (dwm.exe). We believe it is exploited in the wild, potentially by several threat actors.
Source: Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310) used in the wild (https://securelist.com/zero-day-vulnerability-in-desktop-window-manager-cve-2021-28310-used-in-the-wild/101898/)