Microsoft Patches Two Zero-Day Vulnerabilities Disclosed by Researcher
Microsoft has released fixes for two high-severity zero-day vulnerabilities on Tuesday. These flaws were publicly disclosed by a researcher operating under the pseudonym Nightmare Eclipse, who has been involved in a dispute with the software giant. The researcher stated that the disclosures, which included proof-of-concept code, occurred after Microsoft reportedly reneged on an agreement concerning vulnerabilities. These zero-day vulnerabilities were identified as having the potential for exploitation.
Microsoft on Tuesday released fixes for two high-severity zero-day vulnerabilities. These flaws were publicly disclosed by a researcher known as Nightmare Eclipse.
Nightmare Eclipse has revealed several high-severity vulnerabilities in recent months, which became zero-days due to their public disclosure prior to official patches. These vulnerabilities were noted as having the potential to be exploited in the wild.
The researcher stated that these disclosures, which included proof-of-concept code, came after an arrangement made with Microsoft regarding previously discussed vulnerabilities was reportedly violated. Nightmare Eclipse expressed their view in March, stating, "But someone violated our agreement and left me homeless with nothing. They knew this will happen and they still stabbed me in the back anyways, this is their decision not mine."
According to Ars Technica, a separate zero-day vulnerability also disclosed by Nightmare Eclipse also appears to have been addressed in the recent updates.
Advertisement
AdSense slot • inline
