Microsoft patches 19 critical vulnerabilities in Patch Tuesday

July's security update is smaller than previous months, but includes some important fixes

Microsoft has patched 54 vulnerabilities in Windows and other software its latest Patch Tuesday security fix bonanza.

The updates, 19 of which are critical, are bundled into 12 patches and cover flaws in Windows, Internet Explorer, Edge, Office, .NET Framework and Exchange.

Security firm Qualys has picked out one update in particular that it says is most critical for businesses: an exploit in the Windows Search Service affecting all currently supported versions of Windows Server and Windows desktop operating systems that could lead to a remote attack carried out via the Server Message Block (CVE-2017-8589).

Although the Server Message Block was at the centre of the recent WannaCry ransomware attacks, this patch is unrelated to that vulnerability. In fact, although the SMB can be used to leverage the attack, it's not a vulnerability in the SMB itself per se.

Advertisement
Advertisement - Article continues below

Qualys also picks out the patch for CVE-2017-8563 as a priority for admins to update.

"While Microsoft categorizes the patches for this vulnerability as 'Important,' it could be leveraged in targeted attacks to elevate privileges and obtain system-level access to domain controllers," said product management director Jimmy Graham in a blog post. "This is similar to other known vulnerabilities in NTLM itself. Please note that this patch does require extra configuration steps to implement the added security."

While most of the updates apply to the 'usual suspects', like Windows and Office, there is one outlier - CVE-2017-8584, a vulnerability in HoloLens.

Karl Sigler, threat intelligence manager at security firm Trustwave, said in a blog post: "Since the platform (HoloLens) is still in its infancy and primarily targeted at developers rather than consumers, it's nice to see that security is being addressed so early."

Featured Resources

The IT Pro guide to Windows 10 migration

Everything you need to know for a successful transition

Download now

Managing security risk and compliance in a challenging landscape

How key technology partners grow with your organisation

Download now

Software-defined storage for dummies

Control storage costs, eliminate storage bottlenecks and solve storage management challenges

Download now

6 best practices for escaping ransomware

A complete guide to tackling ransomware attacks

Download now
Advertisement

Recommended

Visit/laptops/34636/microsoft-surface-laptop-3-hands-on-review-powerfully-tempting
Laptops

Microsoft Surface Laptop 3 13in review: Almost the perfect laptop

6 Dec 2019
Visit/hardware/laptops/354275/microsoft-surface-laptop-3-15in-review-ryzen-falls
Laptops

Microsoft Surface Laptop 3 15in review: Ryzen falls

4 Dec 2019
Visit/cloud/354231/the-it-pro-podcast-is-the-future-multi-cloud
Cloud

The IT Pro Podcast: Is the future multi-cloud?

29 Nov 2019
Visit/security/354156/google-confirms-android-cameras-can-be-hijacked-to-spy-on-you
Security

Google confirms Android cameras can be hijacked to spy on you

20 Nov 2019

Most Popular

Visit/security/identity-and-access-management-iam/354289/44-million-microsoft-customers-found-using
identity and access management (IAM)

44 million Microsoft customers found using compromised passwords

6 Dec 2019
Visit/cloud/microsoft-azure/354230/microsoft-not-amazon-is-going-to-win-the-cloud-wars
Microsoft Azure

Microsoft, not Amazon, is going to win the cloud wars

30 Nov 2019
Visit/hardware/354237/five-signs-that-its-time-to-retire-it-kit
Sponsored

Five signs that it’s time to retire IT kit

29 Nov 2019
Visit/business/business-strategy/354195/where-modernisation-and-sustainability-meet-a-tale-of-two
Sponsored

Where modernisation and sustainability meet: A tale of two benefits

25 Nov 2019