Microsoft has a critical issue with Windows and you need update NOW
The company explained that an attacker can install programs, view, alter or delete data or even create new accounts with full user rights. It is a remote code execution problem which means that users could be exposed to threats whenever an unpatched system makes its way onto untrusted web pages and their embedded OpenType fonts. The vulnerability was found by researchers at Google’s Project Zero and Fireeye.
“Failing a patch and restart, Windows users should disable this font-rendering service entirely by following the detailed instructions provided by Microsoft’s security advisory, he said”.
Beginning today (July 20) in the United States and July 29 globally, the first wave of TV and digital ads will highlight how Windows 10 delivers a more human way to do – brought to life with features like Windows Hello and Microsoft Egde. If not fixed it would allowed hackers to take “complete control of the affected system”.
The precise severity of the flaw is clear from Microsoft’s decision to break from its usual monthly Patch Tuesday update cycle in order to get the patch out to users as quickly as possible.
Microsoft says that it has information that the vulnerability and its exploitation are known in the wild, although it has not heard of any active exploits yet.
Additionally, this update includes non-security-related changes to enhance the functionality of Windows 10 through new features and improvements. Windows 10 is supposed to be the operating system that fixes everything wrong about Windows 8, and a return to the usability of Windows 7 – and frankly, that’s what the video shows. “Customers who have automatic updates enabled or apply the update will be protected”, the firm advised.
There are multiple ways an attacker could exploit the vulnerability, mostly via social engineering.