Critical vulnerability Found in Windows 10 Clipboard Paste Feature ByNitish Singh-June 15, 2018.337 Figure 1 Picture Courtesy of FossBytes McAfee Labs has found multiple vulnerabilities on the Windows 10 platform, including the exploit of Clipboard Paste. The security firm is actively researching bugs and exploits on the Windows 10 platform, and has found several vulnerabilities over the past few weeks. Microsoft has already fixed the vulnerability that gave attackers remote access to the Windows 10 login screen. The vulnerability has been addressed to the tech giant as part of McAfee Labs ‘ security disclosure policy. Most of the new Windows 10 versions are free from the attack and even if users don’t upgrade to the newest Windows 10 version they should be secure. The workaround requires the use of a physical keyboard, and it is also possible to use software-based keyboards through remote access software if the device has a network detector remote access. On most versions of Windows 10, the paste option is disabled by default, along with the voice command “Hey Cortana” in the lock screen menu. Nonetheless, it can be overridden in Redstone 1 construct using the shortcut Ctrl+Shift+Insert to allow access to the contents of the clipboard. Attackers could use the vulnerability to force multiple functions to copy and access files without logging in with the password of the device. Earlier this week the security firm found an exploit in Cortana which enabled hackers to access an indexing function to run exploits or malware. The in-built indexing feature of Cortana makes the search function much faster once filenames in the Cortana index are visible. Using a Usb drive and a PowerShell script to execute exploits on any public or shared Windows 10 Pc, the Cortana exploit provided. The Cortana and Clipboard exploits have already been patched by Windows and McAfee will continue to monitor the application and find any remaining vulnerabilities in the Os.