Google Reveals Windows 10 Flaw Publicly, Microsoft Does Not Take It Kindly, Preparing To Give It Back?

Microsoft and Google are at loggerheads over a Windows 10 flaw. On Monday, Google has publicly revealed the flaw after it gave Microsoft ten days to address the issue or warn the public about it. The search giant had informed Microsoft on October 21 about a security issue in Windows 10 System file that could be used by hackers to by pass the security. Google has a strict seven days policy, wherein the vendor should either fix the issue or warn public about the same. A 2013 Google blog post said,

"Seven days is an aggressive timeline and may be too short for some vendors to update their products, But it should be enough time to publish advice about possible mitigations."

Google pointed out the Windows 10 flaw as it was being actively exploited by hackers. It lets hackers exploit a bug in the Windows kernel, use a system 32 file to bypass the security sandbox. A recent Security blog post read by Google read, "The vulnerability is particularly serious because we know it is being actively exploited, "The Windows vulnerability is a local privilege escalation in the Windows kernel that can be used as a security sandbox escape."

Microsoft doesn't seem to be amused with Google going public. Microsoft believes Google should have coordinated in sharing the vulnerability rather than going public as it has increased the potential risk for its customers, as reported by PC world. Microsoft has recommended users to use only Windows 10 and Microsoft Edge browser for the best protection. The vulnerability seems to be in Adobe Flash which has already been updated. Google has recommended using an updated Adobe version.

It is practically impossible for Microsoft to correct the Windows 10 flaw or release a security patch in a short frame of time. Microsoft thinks that fixing it would take some time as it required fixing several other issues too. It looks like the Microsoft-Google fight will effect the Windows 10 users who are using an OS which is vulnerable and has flaws. It is our view that when the security of millions of users are at stake, both companies should patch things up as soon as possible.