MsMpEng: Remotely Exploitable Type Confusion in Windows 8 - 10, Microsoft Security Essentials, etc. | Lobsters

16

MsMpEng: Remotely Exploitable Type Confusion in Windows 8 - 10, Microsoft Security Essentials, etc. security windows bugs.chromium.org
via lattera 6 years ago | archive
Archive.org Archive.today Ghostarchive
| 1 comment

1

1

chadski 6 years ago | link

NScript is the component of mpengine that evaluates any filesystem or network activity that looks like JavaScript. To be clear, this is an unsandboxed and highly privileged JavaScript interpreter that is used to evaluate untrusted code, by default on all modern Windows systems.

…