Chained with another previously unknown vulnerability in Windows, assigned CVE-2024-49039 ... if a victim browses to a web page containing the exploit, an adversary can run arbitrary code ...
Binarly said the exploit the company uncovered injects code into the UEFI, the firmware responsible for booting modern devices that run Windows or Linux. It does this by exploiting one of about a ...