Google took to its Security Blog yesterday to announce that it had recently found a couple of vulnerabilities in Flash and the Windows kernel. It’s standard practice for the search giant, except that it hardly allowed Microsoft any time to patch the issue.
The company described the Windows bug thusly:
The Windows vulnerability is a local privilege escalation in the Windows kernel that can be used as a security sandbox escape. It can be triggered via the win32k.sys system call NtSetWindowLongPtr() for the index GWLP_ID on a window handle with GWL_STYLE set to WS_CHILD. Chrome’s sandbox blocks win32k.sys system calls using the Win32k lockdown mitigation on Windows 10, which prevents exploitation of this sandbox escape vulnerability.