What you need to know
- Microsoft disclosed a "critical" new Windows flaw today.
- The vulnerability affects all supported versions of Windows.
- Hackers are actively exploiting the unpatched flaw in "limited, targeted attacks," Microsoft says.
Microsoft today posted a security advisory disclosing a new, unpatched vulnerability in Windows. The flaw is rated as "critical" in severity, and it affects all supported versions of Windows. Microsoft says it is working on a fix, but there's currently no patch available (via TechCrunch).
"Two remote code execution vulnerabilities exist in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format," Microsoft said in its security guidance. "There are multiple ways an attacker could exploit the vulnerability, such as convincing a user to open a specially crafted document or viewing it in the Windows Preview pane."
Microsoft says that it is aware of "limited, targeted attacks" that attempt to use the vulnerability. As for when a patch may be available, Microsoft simply says that patches "address security vulnerabilities in Microsoft software are typically released on Update Tuesday." That would put a date for a potential patch at April 14.
In an accompanying FAQ, Microsoft clarifies that the Windows Explorer Preview Pane is an attack vector for this vulnerability, but the Outlook Preview Pane is not. The company also clarifies that Windows 7 machines will only be patched for those with an extended security update license. Windows 7 reached end-of-support on January 14.
We may earn a commission for purchases using our links. Learn more.
Minecraft Dungeons lead talks its next DLC and the future endgame
We talk Minecraft Dungeons’ recent Jungle Awakens DLC, the Creeping Winter expansion, and future endgame plans with game director, Måns Olson.
Fix up your Xbox Elite Controller with these parts
Need some replacement parts for your Xbox One Elite Controller? From new paddles, grips, bumpers, thumbsticks, and more, we have you covered.
Hands-on with Windows 10 build 20161 showcasing the new Start menu
Yesterday, Microsoft released a new build of Windows 10 that includes an updated Start menu design with translucent Live Tiles, improvements to Notifications, and behavior changes to things like Tablet Mode and the Taskbar. It's been a while since Microsoft released a build with any surface-level changes, but now it's finally happened, we're back showcasing all the changes on video.
10 must-have apps for any new PC
You just purchased a new PC and set it up, and now you're looking for some great apps. Look no further. These are the best apps for your new Windows 10 PC.