How to protect your Windows from win32k.sys security flaw

Ivan Jenic By: Ivan Jenic
2 minute read

Home » News » How to protect your Windows from win32k.sys security flaw

As you probably know, Google revealed a vulnerability in the Windows kernel earlier this week. Just like it’s the case with most vulnerabilities, it allows attackers to bypass security measures, and potentially gain a full control of affected user’s system.

According to Google the vulnerability “can be triggered via the win32k.sys system call NtSetWindowLongPtr() for the index GWLP_ID on a window handle with GWL_STYLE set to WS_CHILD.” In other words, as we said, attackers can break into your system, by taking privileges for running their malicious software. This vulnerability is available in all versions of Windows.

Although Microsoft is aware of the problem, the company still hasn’t released a legitimate patch to address this vulnerability. As this moth’s Patch Tuesday is ahead of us, it is expected from Microsoft to release the patch during this occasion. But what until then?

How to protect your computer from win32k.sys security flaw

There are a couple of things you can do to keep yourself as secure as possible from this security flaw. Unlike Microsoft, Adobe recently updated Flash with the patch, so running the latest version of Flash will take the vulnerability away. As Adobe’s software is known for being a common target of security attacks, it’s not a surprise that the company acted quickly.

The same goes for the most popular browsers for Windows 10, Google Chrome and Microsoft Edge. These browsers already provide solutions to such threats, so just in case, make sure you’re using the latest versions.

Microsoft’s Terry Myerson also said that users with Windows Defender activated will also be safe from attacks:

Customers who have enabled Windows Defender Advanced Threat Protection (ATP) will detect STRONTIUM’s [that’s how Microsoft internally calls a hacker group who performs the attack] attempted attacks thanks to ATP’s generic behavior detection analytics and up-to-date threat intelligence”.

However, all these ‘solutions’ apply to Windows 10 only. If you’re running an older version of Windows, you’re pretty much exposed. The only thing you can do is to browse the internet with some of the security-oriented browsers, like Comodo IceDragon, or completely disable networking until Microsoft provides a patch.

Another solution that Microsoft suggests is upgrading to Windows 10. Nice try, but we don’t think it will be a clincher for core Windows 7 fans. However, they’ll eventually have to upgrade anyway, but that’s a story for another day.

RELATED STORIES YOU NEED TO CHECK OUT:

Discussions

Next up

Download VPN Unlimited for Windows 10 to access geo-restricted content

Rabia Noureen avatar. By: Rabia Noureen
2 minute read

Most of us are sick of the messages informing us that the content is unavailable when we access Hulu or Netflix apps. This notification appears […]

Continue Reading

What to do if your VPN stopped working in Dubai

Daniel Segun By: Daniel Segun
7 minute read

Are you resident in Dubai? Are you having problems with your VPN? If so, follow this guide to fix it. Here, we’ll be showing you […]

Continue Reading

Here’s how you can fix error 0x80070780 on Windows 10

Matthew Adams By: Matthew Adams
4 minute read

Error 0x80070780 arises for some users when they try to copy, delete, back up or edit certain files in Windows 10. The error message states: […]

Continue Reading