Get the App
SLTechnology News&Howtos  ›  Computer Software News  › 

Reinstalling the system after more than 40 Windows driver memory vulnerabilities have been exploited will not solve the problem.

Shulou Source: shulou.com Published: 2022-05-31 10:37:10 11月13日 Update

Recently, cyber security company Eclypsium said that more than 40 different drivers provided by more than 20 third-party companies for Windows are of poor code quality and may be exploited by hackers, all of which have been certified by Microsoft.

Not all of these drivers are the product of "small workshops". The companies on Eclypsium's list include large companies such as Asustek, Huawei, Intel, NVIDIA and Toshiba.

Eclypsium says these drivers can affect all versions of Windows, which means that at least millions of Windows users face security risks because these drivers run malicious applications to gain kernel privileges at the user level, giving direct access to firmware and hardware.

Eclypsium stressed that malware can be installed directly into the firmware through these drivers, so reinstalling the system may not even completely solve the problem.

If a vulnerable driver already exists in the system, the malicious application only needs to use it to gain permissions. If these drivers do not exist on the computer, malicious applications may come with drivers to guide the user to install, but require administrator approval to install them.

In response, Microsoft suggests that users can use Windows Defender to block software and drivers from unknown sources.

Tags: Drivers programs companies malicious users drivers applications systems security firmware permissions software Microsoft problems differences products code kernels just need Apple Docker Huawei Linux macOS MariaDB Microsoft MySQL NVidia OPPO Reno Microsoft Huawei MySQL MariaDB Shulou Tech Info