Menu
Microsoft pushes emergency update for Internet Explorer vulnerability

Microsoft pushes emergency update for Internet Explorer vulnerability

The patch fixes a security hole that lets an attacker run malicious code remotely

Windows users are encouraged to update their computers as soon as possible, after Microsoft pushed out a patch for an issue in Internet Explorer that lets attackers remotely run malicious code with whatever privileges the current user has.

The "Critical" vulnerability affects Internet Explorer versions 7 through 11 on Windows 7, 8, 8.1, 10 and Vista. Windows Server 2008, 2012, 2012 R2 and the Windows Server Technical Preview are all effected, but Internet Explorer runs in a "Enhanced Security Configuration" that should mitigate the effects of this problem. The "out-of-band" patch was released outside Microsoft's typical Patch Tuesday release cycle and allows users and administrators to update their computers quickly.

Microsoft Edge, the new browser included in Windows 10, isn't affected by the vulnerability. However, Microsoft's new operating system also ships with a copy of Internet Explorer 11 installed, which is why it's getting updated.

The vulnerability is caused by an issue with Internet Explorer improperly accessing objects in memory. That could corrupt memory in a way that allows attackers to execute code with the current user's privileges. If that user has administrator capabilities, the attacker would be able to take complete control of a computer and do things like modify files and install programs. Users without administrator privileges may be slightly better off, though an attacker will still be able to do anything they're able to do.

Windows 10 received the patch as part of a cumulative update that also installs all of the prior patches Microsoft released for the system, the fourth that Microsoft has released since the launch of Windows 10 on July 29.


Follow Us

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Featured

Slideshows

Reseller News launches new-look Awards at 2018 Judges’ Lunch

Reseller News launches new-look Awards at 2018 Judges’ Lunch

Introducing the Reseller News Innovation Awards, launched to the channel at the 2018 Judges’ Lunch in Auckland. With more than 70 judges now part of the voting panel, the new-look awards will reflect the changing dynamics of the channel, recognising excellence across customer value and innovation - spanning start-ups, partners, distributors and vendors.

Reseller News launches new-look Awards at 2018 Judges’ Lunch
Kiwi channel debates GDPR as Reseller News Exchange hits Wellington

Kiwi channel debates GDPR as Reseller News Exchange hits Wellington

This exclusive Reseller News Exchange, in association with Arrow ECS ANZ, ForeScout and StorageCraft, went on the road to debate the early implications of GDPR in New Zealand, extracting opportunities while evaluating challenges for the channel in the year ahead.

Kiwi channel debates GDPR as Reseller News Exchange hits Wellington
Show Comments