13 Ways to Protect Your Windows PC

Summary: Microsoft released 13 software update bundles to fix 26 vulnerabilities in Windows and other software, with five of the bundles rated critical. The most serious flaws include an SMB networking vulnerability rated critical on all supported Windows versions except Vista and Server 2008, a Windows Shell Handler bug affecting Windows 2000, XP and Server 2003, and critical ActiveX/Internet Explorer and Directshow flaws.
Bottom line: Five critical bundles mean attackers could seize control of vulnerable systems just by getting users to visit a hacked or malicious website, and commenters reported that patch KB977165 was leaving some PCs unable to boot or blue-screening after installation.

Read the original at Krebs on Security ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026