Security News

Free unofficial patches have been released to protect Windows users from a local privilege escalation zero-day vulnerability in the Mobile Device Management Service impacting Windows 10, version 1809 and later. While Microsoft has most likely also noticed Naceri's June disclosure, the company is yet to patch this LPE bug, exposing Windows 10 systems with the latest November 2021 security updates to attacks.

Microsoft has released the optional KB5007253 Preview cumulative update for Windows 10 2004, Windows 10 20H2, Windows 10 21H1, and Windows 10 21H2. Microsoft claims this update fixes network printing issues causing 0x000006e4, 0x0000007c, or 0x00000709 error codes to be displayed. The KB5007253 cumulative update preview is part of Microsoft's September 2021 monthly "C" update, allowing admins to test fixes coming as part of the December 2021 Patch Tuesday.

Microsoft released Windows 10 21H2, the November 2021 Update, last week and you can now download an ISO image for the new version to put aside for emergencies or clean installs. If you plan on upgrading to the new version of Windows it is always recommended that you download or create an ISO to have on hand for troubleshooting problems or performing clean installs of Windows.

The policies associated with it will certainly make purchasers think it's a "Student Edition." While there are no actual restrictions on how Windows 11 SE hardware is sold, it's branding that should let potential purchasers know that this isn't a Windows for home or the office: This is only for the classroom. Where Windows 10 S wouldn't be able to run, say, the Win32 Zoom client, it's supported on Windows 11 SE. It's a shift that puts the Windows education release in line with Microsoft's new Windows Store policies.

Microsoft has started rolling out the Windows 11 upgrade to more eligible Windows 10 devices faster after not detecting update experience issues during the first rollout phases. Microsoft released Windows 11 on October 5 and is now rolling it out to eligible Windows 10 devices via Windows Update.

Microsoft has released Windows 10 21H2, also known as the November 2021 Update, and it is available to users running Windows 10 2004 or later as an optional update in Windows Update. "To install the Windows 10 November 2021 feature update, click on the Start Menu > Settings > Update & Security and click on the 'Check for updates' button. Windows 10 will check for new updates and then display the optional 'Feature update to Windows 10, version 21H2', which you can install by clicking the 'Download & install now" link.

A partially unpatched security bug in Windows that could allow local privilege escalation from a regular user to System remains unaddressed fully by Microsoft - but an unofficial micropatch from oPatch has hit the scene. "The vulnerability lies in the User Profile Service, specifically in the code responsible for creating a temporary user profile folder in case the user's original profile folder is damaged or locked for some reason," explained 0Patch's Mitja Kolsek in a Thursday writeup.

Microsoft has started rolling out Windows 11's new Microsoft Store to Windows 10, allowing users a greater option of apps for users to install. With Windows 11, Microsoft introduced a redesigned Microsoft Store with a modern design and a more open ecosystem.

The TrickBot gang operators are now abusing the Windows 10 App Installer to deploy their BazarLoader malware on the systems of targets who fall victim to a highly targeted spam campaign. When clicking the button, the browser will first show a warning asking the victim if they want to allow the site to open App Installer.

AMD has fixed a long list of security vulnerabilities found in its graphics driver for Windows 10 devices, allowing attackers to execute arbitrary code and elevate privileges on vulnerable systems. "In a comprehensive analysis of the AMD Escape calls, a potential set of weaknesses in several APIs was discovered, which could result in escalation of privilege, denial of service, information disclosure, KASLR bypass, or arbitrary write to kernel memory," AMD explained.