Microsoft Releases Interim Patch for Critical Vulnerability in Windows Server

Microsoft will release a patch on Tuesday for a critical vulnerability in Windows Server. The leak could give users more rights than they should be, but Microsoft is not releasing any further details.

Although the vulnerability is only in Windows Server, Microsoft is also releasing the patch for consumer and business versions of Windows. Thanks to that update, those PCs should have a little better protection against possible attacks, because the bug does exist in those versions of Windows, but attackers can’t do anything with that leak alone; to do that, they would have to break through multiple layers of security.

Microsoft is not disclosing any details about the vulnerability, only that it could lead to “elevation of privilege” for users. The patch will be released for all operating systems at 7 PM GMT, and Microsoft will also update its malware tool Malicious Software Removal Tool. The leak is in all known Windows versions, including the preview version of Windows 10. The oldest version of Windows that Microsoft patches are Server 2003 and Vista.

Update, 19/11 11:00: Microsoft has already released the patch.