Google has disclosed a security vulnerability in Windows 10 S, the version of Windows 10 that Microsoft considers the most secure thanks to its Win32 software.
The security flaw allows arbitrary code execution on devices with Device Guard enabled and successful exploitation requires access to the system.
The vulnerability was discovered as part of Google's Project Zero , which offers software developers a 90-day deadline to address bugs found in their software.
In Microsoft's case, a fix was found in April, but the company didn't have time to complete its work on the patch, so it extended its release until May. Google however, did not forgive the delay and published all the details about the vulnerability online.
The Windows 10 S security flaw is marked as medium critical, and while it is particularly difficult to exploit, other potential flaws in the operating system could allow cybercriminals to gain control of affected systems.
For your information, Windows 10 S does not allow the installation of Win32 software on devices running it, and Microsoft allows upgrading to Windows 10 Pro directly through the operating system.
However, it should be noted that Windows 10 S is expected to be integrated into Windows 10 soon as “S Mode”, which means that Microsoft will enable all the security features provided by this version, in more than one version of the operating system.
Microsoft is expected to offer a patch for the Windows 10 S vulnerability early next month.
