Light

Episode #867 Quiz

A Critical Windows RPC RCE
Date: 2022-04-19 | Length: 1.75 hrs | Episode page at twit.tv

About this episode

Chrome’s third 2022 zero-day was a V8 type-confusion flaw fixed in desktop Chrome 100.0.4896.127. Microsoft’s 128 patches included 47 RCEs and 47 privilege escalations, with a 9.8 RPC runtime integer-overflow bug enabling heap overflow and zero-click worm potential. Mitigation: patch immediately, restrict exposure, and avoid public SMB/RPC access.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: According to the episode, which Windows component contained the actively exploited zero-day privilege escalation that was reported by both the NSA and CrowdStrike?

Question 1

According to the episode, which Windows component contained the actively exploited zero-day privilege escalation that was reported by both the NSA and CrowdStrike?

Windows User Profile Service Windows Network File System Windows Common Log File System Windows Remote Procedure Call Runtime Library

Question 2: What did the episode say was the key security weakness in the Elementor WordPress plugin version 3.6.0?

Question 2

What did the episode say was the key security weakness in the Elementor WordPress plugin version 3.6.0?

Improper certificate validation during plugin updates Failure to sanitize database backup exports Missing capability checks on admin-accessible functionality Unsafe deserialization of uploaded theme metadata

Question 3: In the discussion of Apache Struts, what current version did Steve say users should immediately upgrade to or beyond?

Question 3

In the discussion of Apache Struts, what current version did Steve say users should immediately upgrade to or beyond?

Struts 2.5.30 or greater Struts 2.5.26 or greater Struts 2.5.25 or greater Struts 2.5.13 or greater

Question 4: What did Akamai identify as the underlying flaw mechanism in CVE-2022-26809 after diffing the patched Windows RPC runtime library?

Question 4

What did Akamai identify as the underlying flaw mechanism in CVE-2022-26809 after diffing the patched Windows RPC runtime library?

An integer overflow leading to heap buffer overflow A path traversal leading to arbitrary file overwrite A race condition leading to privilege escalation A use-after-free leading to object reuse

Question 5: Which transport did the episode explicitly note as the most common way RPC was carried for this Windows vulnerability?

Question 5

Which transport did the episode explicitly note as the most common way RPC was carried for this Windows vulnerability?

SMB over port 445 RDP over port 3389 DNS over port 53 HTTPS over port 443

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.