Hackers Use Windows XSS Flaw To Execute Arbitrary Command In MMC Console

Attackers are leveraging a new infection technique called GrimResource that exploits MSC files. By crafting malicious MSC files, they can achieve full code execution within the context of mmc.exe (Microsoft Management Console) upon a user click.  It offers several advantages for attackers by bypassing the need for macros (disabled by default) and providing low-security warnings, […]

The post Hackers Use Windows XSS Flaw To Execute Arbitrary Command In MMC Console appeared first on GBHackers on Security | #1 Globally Trusted …

attackers bypassing called can click code code execution command console context cross site scripting cve cyber-attack exploit exploits files flaw grimresource hackers infection macros malicious management microsoft mmc console mmc exploit msc vulnerability windows xss xss flaw xss-vulnerability