Microsoft released its new set of Patch Tuesday updates for which is now available for all users. The latest updates come with fixes for not less than 51 vulnerabilities which affect Windows operating system, Microsoft Edge and Office Suite.
Microsoft recommends users to install the latest set of Patch Tuesday updates on their desktops as soon as they are available to stay away from any major issues.
The Patch Tuesday updates come with more fixes for the Spectre vulnerability which was a major issue affecting Windows 7 users. The Meltdown and Spectre vulnerability mostly affected the Windows 7 PCs and some Intel processors. The company has already released many patches earlier to fix the issues pertaining to the Spectre vulnerability and we expect Intel to ship new microcode updates in the coming weeks after the latest Patch Tuesday update.
Microsoft has also made sure to fix vulnerability issue with a Remote Code flaw which would help an attacker to run arbitrary code in the Local System Account.
“To exploit the vulnerability, the attacker would use a malicious DNS server to send corrupted DNS responses to the target,” Microsoft says, adding that this update changes the way DNSAPI.dll handles DNS responses.
The Redmond Giant also confirms a flaw allowing remote code execution exists when HTTP Protocol Stack (Http.sys) improperly handles objects in memory. This would make it easy for the attacker in exploiting the vulnerability and take control of the system.
“A remote code execution vulnerability exists when HTTP Protocol Stack (Http.sys) improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code and take control of the affected system,” the company explains. “To exploit the vulnerability, in most situations, an unauthenticated attacker could send a specially crafted packet to a targeted Http.sys server”.
The latest Patch Tuesday update have been termed as June 2018 update and is available via the Windows Update. Remember that a reboot of your device is required to download the June 2018 Patch Tuesday update.
