Skip to main content

New Internet Explorer updates plug security holes in Adobe Flash Player, more

Internet explorer
Image used with permission by copyright holder
In keeping with the company’s monthly patch-release tradition, Microsoft released a slew of new security updates aimed at plugging holes in multiple versions of Internet Explorer.

Microsoft rates the update as “critical” for Internet Explorer versions 6 – 11. The versions of Windows that this applies to include Windows 8.1, Windows 7, Windows Vista, Windows RT 8.1, and multiple flavors of Windows Server.

Related: Windows 8/8.1 use still can’t touch Windows XP

Here’s how Microsoft describes the vulnerabilities that these updates address and plug.

“The most severe of these vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Internet Explorer,” Microsoft says. “An attacker who successfully exploited these vulnerabilities could gain the same user rights as the current user. Customers whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.”

Related: New Surface Pro 3 firmware claims to improve Wi-Fi, system stability

Keep in mind that, if you’re still using Windows XP (and recent statistics indicate that many of you still do), you’re out of luck. You won’t get these patches. Microsoft ended support for Windows XP back in April of this year.

If you have automatic updating enabled in Windows, you may already have installed these patches without even knowing it. Just in case, you should do a Windows Update scan to be sure.

Topics
Konrad Krawczyk
Former Digital Trends Contributor
Konrad covers desktops, laptops, tablets, sports tech and subjects in between for Digital Trends. Prior to joining DT, he…
A dangerous new jailbreak for AI chatbots was just discovered
the side of a Microsoft building

Microsoft has released more details about a troubling new generative AI jailbreak technique it has discovered, called "Skeleton Key." Using this prompt injection method, malicious users can effectively bypass a chatbot's safety guardrails, the security features that keeps ChatGPT from going full Taye.

Skeleton Key is an example of a prompt injection or prompt engineering attack. It's a multi-turn strategy designed to essentially convince an AI model to ignore its ingrained safety guardrails, "[causing] the system to violate its operators’ policies, make decisions unduly influenced by a user, or execute malicious instructions," Mark Russinovich, CTO of Microsoft Azure, wrote in the announcement.

Read more