Conversation

Notices

1. Embed this notice
   br00t4c (br00t4c@mastodon.social)'s status on Tuesday, 15-Apr-2025 09:06:51 JST br00t4c

   Don't delete that mystery empty folder. Windows put it there as a security fix

   #SecurityPatch #Windows10 #CopilotVibeCoding #WindowsUpdate #OSDevelopment

   https://go.theregister.com/feed/www.theregister.com/2025/04/14/windows_update_inetpub/

   • Embed this notice
     Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Tuesday, 15-Apr-2025 09:13:36 JST Haelwenn /элвэн/ :triskell:

     in reply to
     @br00t4c
     > CVE-2025-21204
     > - Score: 7.8 HIGH
     > Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.
     
     heh that's a fun CVE