What you need to know
- Microsoft disclosed a "critical" new Windows flaw today.
- The vulnerability affects all supported versions of Windows.
- Hackers are actively exploiting the unpatched flaw in "limited, targeted attacks," Microsoft says.
Microsoft today posted a security advisory disclosing a new, unpatched vulnerability in Windows. The flaw is rated as "critical" in severity, and it affects all supported versions of Windows. Microsoft says it is working on a fix, but there's currently no patch available (via TechCrunch).
"Two remote code execution vulnerabilities exist in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format," Microsoft said in its security guidance. "There are multiple ways an attacker could exploit the vulnerability, such as convincing a user to open a specially crafted document or viewing it in the Windows Preview pane."
Microsoft says that it is aware of "limited, targeted attacks" that attempt to use the vulnerability. As for when a patch may be available, Microsoft simply says that patches "address security vulnerabilities in Microsoft software are typically released on Update Tuesday." That would put a date for a potential patch at April 14.
In an accompanying FAQ, Microsoft clarifies that the Windows Explorer Preview Pane is an attack vector for this vulnerability, but the Outlook Preview Pane is not. The company also clarifies that Windows 7 machines will only be patched for those with an extended security update license. Windows 7 reached end-of-support on January 14.
We may earn a commission for purchases using our links. Learn more.
Review: HP Spectre x360 13 is our buyer's choice for best 2-in-1
The HP Spectre x360 13 is back and with it comes an all-new design. HP has fixed the giant bezels and not-so-hot trackpad making its latest model one of the best choices to maximize your dollar. Modern specifications, a unique gem-cut design, and excellent keyboard are its hallmarks. But, that 16:9 aspect display is getting tired.
Need a new router and have no idea where to start? Check out this guide!
Sure, you can run out and grab the most expensive router you can find, but taking several factors into account can save you money and make you much happier with your purchase.
Microsoft reportedly making most events digital-only for next year
Microsoft is reportedly moving to make its internal and external events digital-only through its 2021 fiscal year. That would include events like Ignite 2020 and Build 2021.
These are the best PC sticks for when you're on the move
Instant computer, just add a screen! That’s the general idea of the ultra-portable PC Compute Sticks, but it can be hard to know which one you want. Relax, we’ve got you covered.