Items tagged with security update

Not every problem has an immediate solution. Microsoft recently explained how it prioritizes resolving vulnerabilities. Some vulnerabilities are fixed through a quick security update, while others are saved for the next version of Windows. Microsoft revealed that it asks two questions before providing a security update for a reported and confirmed vulnerability: Does the vulnerability violate a promise made by a security boundary or a security feature that Microsoft has committed to defending? Does the severity of the vulnerability meet the bar for servicing? If the answer to both of these questions is “yes”, then Microsoft will more than likely release a security update to resolve... Read more...
A few weeks back, Microsoft confirmed the existence of a 17-year-old bug in all 32-bit versions of Windows that could, under certain circumstances, be used to gain control of a system. The flaw's usefulness was limited, since anyone with administrative access to a system probably doesn't need a hack to gain control of it, but Redmond issued a patch (KB977165) anyway. Unfortunately, Microsoft may have traded a bit of embarassment over the continued existence of such an old problem for a full-on facepalm. After the company released its latest set of security patches on Tuesday, Windows XP users began complaining that the update crashes their systems. Attempting to boot, either normally or in safe... Read more...