Last Tuesday, Microsoft released 63 patches as part of the June 2023 Update for Windows 11 and Windows 10. It included a patch intended to fix a vulnerability found in the Windows kernel that could lead to information disclosure, but the patch could cause further problems. turned out to be
The vulnerability is CVE-2023-32019, “An authenticated user (attacker) could cause an information disclosure vulnerability in the Windows kernel. This vulnerability requires administrator or other elevated privileges.” No, an attacker successfully exploited this vulnerability.” It may be possible to view heap memory from a privileged process running on the server. “
Ultimately, while potentially dangerous, this vulnerability shouldn’t pose an immediate threat to most people. However, it may be fixed.
In an update to their bug fixes page, Microsoft states (via neowin):
“important The solution described in this article may result in breaking changes. Therefore, we will release it with an option to enable changes that are disabled by default. Future releases will enable this resolution by default. We recommend that you validate this solution in your environment. Then, once verification is complete, enable the solution as soon as possible. “
You can now choose to enable or disable bug fixes based on whether the OS you are running most needs them. By default, this fix is disabled, but Microsoft lists when it should be enabled. Support page.
The problem gamers currently face with Windows is whether to actually download the latest June 13th update (KB5027231/KB5027223/KB5027219).
On the one hand, it’s full of security fixes that really should be deployed on your machine.
On the other hand, on Reddit, Windows User Anecdotal Report In the words of one unlucky user, the latest build of Windows has “ruined my PC.” ah.