Skip to content
All posts

86% of Windows Security Flaws Can be Reduced by Removing Admin Rights

Via ZDNet: Security firm Avecto has released a report that argues that up to 86% of all Windows security vulnerabilities could be mitigated by the simple removal of administrative privileges on enterprise workstations.

The report said that removing admin rights could've mitigated more than 99 percent of flaws affecting Internet Explorer, which had a critical-rated flaw almost every month; and mitigated 82 percent of all vulnerabilities affecting Office.

The company analyzed the entire batch of vulnerabilities in Microsoft's monthly security patch update, dubbed Patch Tuesday, to see which flaws would be less impacted whose logged-in accounts "are configured to have fewer user rights on the system."

Out of the entire batch of vulnerabilities reported, 63 percent would be mitigated or un-exploitable if admin rights were removed.

 

The full text of the report itself can be found here: https://www.serverlab.it/wp-content/uploads/2016/04/microsoft-vulnerabilities-report-2015.pdf