Patch Tuesday

In this month’s Patch Tuesday, Microsoft released a disabled-by-default patch for Spectre 4, Adobe plugs a zero-day Flash vulnerability that can be exploited via Excel, and there are fixes for DNS, black screens, and Cortana.

This month the Windows 10 April 2018 Update finally drops, although some Intel SSDs don’t seem to be happy about it, and a zero-day vulnerability is being exploited in the wild.

This month’s Patch Tuesday fixes 63 CVE vulnerabilities, 17 of which are critical for Windows 10.

This month, Microsoft patches a remote code execution vulnerability for CredSSP, helps Intel distribute microcode updates to protect against Spectre Variant 2, and Office 2016 gets updated to version 1803.

This month’s cumulative update for the Windows 10 Fall Creators Update sees the OS build bumped to version 16299.248.

This month’s Patch Tuesday is one of the most interesting in a while. Not just because the patches Microsoft was preparing for release today came a week early, but also because of the potential issues these patches might cause.

Microsoft has chosen to delay the February Patch Tuesday release until March due to an issue found late in the testing cycle.

Microsoft is making significant changes to how it updates Windows and Server products; these updates go live starting tomorrow which means it is important for you to be prepared.

Microsoft to change how older Windows versions get patches. For better or worse, it’ll be more like the Windows 10 way. Next Patch Tuesday, prepare for a single rollup patch. This means you won’t be able to pick and choose the patches that work for you. And that’s good, because… um, reasons.

While not as massive as the monster patch tuesday release for February 2013, Microsoft’s patch tuesday updates for March 2013 were still noteworthy.