Patch for Critical Windows Flaw Available
Summary: Microsoft released an emergency security update, KB2286198, for a critical flaw present in all supported versions of Windows, as virus writers began ramping up attacks that leverage the vulnerability. The flaw was initially used only in targeted attacks online but is now showing up in more mainstream attacks, and users who applied Microsoft's earlier FixIt workaround must undo it and reboot before installing the official patch.
What you should know: A flaw present in every supported version of Windows moved from targeted attacks to mainstream ones, and the emergency patch itself stalled Windows Explorer on the author's 64-bit Windows 7 system until a forced restart.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026