Microsoft: Hold Off Installing MS13-036
Summary: Microsoft pulled the download links for MS13-036's KB2823324 update, released Tuesday to fix four Windows kernel-mode driver vulnerabilities, after users reported machines that would not boot or recover from a reboot once the patch was applied. Microsoft said the failures centered on Windows 7 and certain third-party software such as Kaspersky Anti-Virus, advised customers to uninstall the update, and on April 23 re-released it as KB62840149 to replace the faulty KB2823324.
What's compelling: A patch Microsoft itself classified as critical left some Windows 7 machines unbootable, and the company's own remediation path assumes an installation disc many new computers no longer ship with - so a bad update can cost you the recovery media you never had.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026