Microsoft patches 19 critical vulnerabilities in Patch Tuesday

July's security update is smaller than previous months, but includes some important fixes

Microsoft has patched 54 vulnerabilities in Windows and other software its latest Patch Tuesday security fix bonanza.

The updates, 19 of which are critical, are bundled into 12 patches and cover flaws in Windows, Internet Explorer, Edge, Office, .NET Framework and Exchange.

Security firm Qualys has picked out one update in particular that it says is most critical for businesses: an exploit in the Windows Search Service affecting all currently supported versions of Windows Server and Windows desktop operating systems that could lead to a remote attack carried out via the Server Message Block (CVE-2017-8589).

Advertisement - Article continues below

Although the Server Message Block was at the centre of the recent WannaCry ransomware attacks, this patch is unrelated to that vulnerability. In fact, although the SMB can be used to leverage the attack, it's not a vulnerability in the SMB itself per se.

Qualys also picks out the patch for CVE-2017-8563 as a priority for admins to update.

"While Microsoft categorizes the patches for this vulnerability as 'Important,' it could be leveraged in targeted attacks to elevate privileges and obtain system-level access to domain controllers," said product management director Jimmy Graham in a blog post. "This is similar to other known vulnerabilities in NTLM itself. Please note that this patch does require extra configuration steps to implement the added security."

Advertisement
Advertisement - Article continues below

While most of the updates apply to the 'usual suspects', like Windows and Office, there is one outlier - CVE-2017-8584, a vulnerability in HoloLens.

Karl Sigler, threat intelligence manager at security firm Trustwave, said in a blog post: "Since the platform (HoloLens) is still in its infancy and primarily targeted at developers rather than consumers, it's nice to see that security is being addressed so early."

Featured Resources

Top 5 challenges of migrating applications to the cloud

Explore how VMware Cloud on AWS helps to address common cloud migration challenges

Download now

3 reasons why now is the time to rethink your network

Changing requirements call for new solutions

Download now

All-flash buyer’s guide

Tips for evaluating Solid-State Arrays

Download now

Enabling enterprise machine and deep learning with intelligent storage

The power of AI can only be realised through efficient and performant delivery of data

Download now
Advertisement

Recommended

Visit/business/business-operations/355147/amazon-and-microsoft-join-nhs-project-battling-pandemic
Business operations

Amazon and Microsoft join NHS project battling pandemic

27 Mar 2020
Visit/operating-systems/microsoft-windows/355105/microsoft-puts-windows-development-on-lockdown
Microsoft Windows

Microsoft puts Windows development on lockdown

25 Mar 2020
Visit/software/backup-software/355104/windows-file-history-and-backup-review-useful-but-limited
backup software

Windows File History and Backup review: Useful but limited

25 Mar 2020
Visit/network-internet/web-browser/355101/microsoft-halts-edge-browser-updates-in-light-of-coronavirus
web browser

Microsoft halts Edge browser updates in light of coronavirus pandemic

24 Mar 2020

Most Popular

Visit/infrastructure/server-storage/355118/hpe-warns-of-critical-bug-that-destroys-ssds-after-40000-hours
Server & storage

HPE warns of 'critical' bug that destroys SSDs after 40,000 hours

26 Mar 2020
Visit/software/video-conferencing/355138/zoom-beaming-ios-user-data-to-facebook-for-targeted-ads
video conferencing

Zoom beams iOS user data to Facebook for targeted ads

27 Mar 2020
Visit/cloud/355098/ibm-dedicates-supercomputing-power-to-coronavirus-researchers
high-performance computing (HPC)

IBM dedicates supercomputing power to coronavirus research

24 Mar 2020
Visit/software/355113/companies-offering-free-software-to-fight-covid-19
Software

These are the companies offering free software during the coronavirus crisis

25 Mar 2020