Microsoft today disclosed more than 25 critical memory allocation vulnerabilities in Internet of Things (IoT) and operational technology (OT) devices that could enable an attacker to bypass security controls and execute malicious code or cause a system to crash in industrial, medical, and enterprise networks. These remote code execution (RCE) flaws are collectively dubbed “BadAlloc”

Read full article on Dark Reading