Microsoft Windows Defender recently obtained a new feature called “Microsoft Vulnerable Driver Block List”. According to reports, the feature is part of Defender’s application control options, which basically protect the device from malicious drivers.
Join tip3x on Telegram
Introducing the feature in a blog post, Microsoft said the Vulnerable Driver Block List is designed to help harden systems against drivers developed by third parties in the Windows ecosystem, including:
-
Known security flaws that could allow attackers to elevate privileges in the Windows kernel.
-
Malicious actions or certificates are used to sign malware.
-
Non-malicious behavior that bypasses the Windows security model and can be exploited by attackers to escalate Windows kernel privileges.
Moreover, Microsoft will work with suppliers to identify such harmful drivers and add them to its “ecosystem blocking policy.” This feature is available for Windows 11, 10, and Server 2016 and later.
