Seems like all the good zero days are in highly vintage components such as SMB, NFS, True Type Fonts and Windows Fax
If I were a security researcher I would look at anything that came from win 3.11, probably full of holes
If I were a security researcher I would look at anything that came from win 3.11, probably full of holes
But NFS probably isn't the top priority for Microsoft, the implementation of NFS 3 felt sketchy, so in that way it's not overly surprising.
Even if this exploit only touches completely new code, my point still stands that windows has multiple layers of archeology which were designed when security was an afterthought.
Some of these are preinstalled with Windows, use networking and run as SYSTEM (WMI, spool) others are used by enough components in windows they will never be removed yet it doesn’t seem they are undergoing any development (COM/OLE)