Microsoft delivers 75-count box of patches for Valentine's Day
Microsoft is showering love, maybe, on IT teams with some 75 security patches, nine of which are rated"critical" and 66"important," and three of which Redmond says are under active exploitation.
Interestingly enough, the trio being taken advantage of aren't the most critical vulnerabilities Microsoft has addressed this month. Of the three being exploited, two have a base CVSS severity score of 7.8 out of 10, while the third scores just 7.3. Five of the others flaws which earned a 9.8 CVSS score are decidedly worse.The first vulnerability under active attack, spotted by Mandiant, is a
in the Windows Graphics Component that would allow a miscreant to execute commands with system-level permissions.is a bug in the Windows Common Log File System Driver and would allow an attacker to elevate their access to gain system privileges. Microsoft didn't share any details about the issue, unfortunately, but with it under active exploitation it's a good idea to install those patches.
The attack has to be carried out by a local user who's already authenticated, Microsoft said. If the authenticated attacker can convince a victim to download and open a malicious file then the security hole can be exploited, otherwise it's not going to happen.
Brasil Últimas Notícias, Brasil Manchetes
Similar News:Você também pode ler notícias semelhantes a esta que coletamos de outras fontes de notícias.
Microsoft wants to make Google dance in battle for AI searchPlus: Publisher using AI tools generated false health advice for men; how ChatGPT widens economic inequalities
Consulte Mais informação »
Microsoft promises smaller Windows 11 updates with UUPMicrosoft promises smaller Windows 11 updates with UUP – but there's a catch
Consulte Mais informação »
Microsoft's AI Bing also generated factual errors at launchMicrosoft's AI Bing also generated factual errors and fabricated text in its demo launch
Consulte Mais informação »
Microsoft seeks to explain its own admission Xbox Game Pass lowers base game salesMicrosoft has issued a statement in response to its own admission that titles entering Xbox Game Pass sell fewer copies…
Consulte Mais informação »
Microsoft says adding titles to Game Pass causes 'cannibalisation' of salesMicrosoft has addressed how adding games to Game Pass can cause a 'cannibalisation' of buy-to-play sales, according to a Competition & Markets Authority report.
Consulte Mais informação »
Tech Tuesday: AI-Generated Show Creates a Spoof on SeinfeldMike Proulx, Research Director at Forrester, discusses how Open AI’s ChatGPT and Dall-E were used to create a spoof of Seinfeld. The dialogue and cartoon are nearly all computer generated and it’s a 24/7 channel on Twitch
Consulte Mais informação »