Microsoft fix Archives

Winsage

March 26, 2025

New Windows Zero-Day Vulnerability Exposes NTLM Credentials – Unofficial Patch Now Available

A zero-day vulnerability has been identified in the Windows operating system, affecting versions from Windows 7 and Server 2008 R2 to Windows 11 v24H2 and Server 2025. This vulnerability allows attackers to obtain NTLM credentials by tricking users into opening malicious files in Windows Explorer. Microsoft has been notified, and while there is no official CVE number yet, an unofficial patch is available through 0patch. The flaw is similar to previous vulnerabilities related to NTLM hash disclosures but has not been widely discussed. To exploit it, attackers need network access to the victim's system or a way to relay stolen credentials. 0patch has created micropatches for all affected Windows versions, which are available for free until Microsoft provides an official fix. This is the fourth zero-day vulnerability reported by 0patch recently, with previous vulnerabilities including those in Windows Theme files and the Mark of the Web issue on Server 2012. 0patch also offers patches for NTLM-related vulnerabilities that Microsoft has classified as “wont fix.” Users can create a free account with 0patch for automatic protection against these vulnerabilities. Micropatches are available for various Windows versions, including both legacy and currently supported systems, and will remain free until an official Microsoft fix is released.

Winsage

June 30, 2024

Microsoft finally patches Copilot bug in Windows 10, more than six months after discovery

Microsoft fixed an issue with Copilot on multi-monitor setups by applying a compatibility hold and releasing a patch for Windows 11 devices in January 2024. The patch for Windows 10 devices was released in June 2024, allowing them to receive Copilot without issues.

Winsage

June 29, 2024

Latest Windows update causes reboot loop — what to do if you’re stuck

Microsoft has paused the distribution of the KB5039302 update for Windows 11, which causes PCs to get stuck in a continuous restart loop. The bug affects Windows 11 versions 23H2 and 22H2, but not Windows servers. The update is optional and serves as a preview for a standard update scheduled for release in July 2024. Microsoft is investigating the issue, focusing on devices using virtual machine tools. The update is not being offered through Windows Update at this time. If stuck in the restart loop, users can uninstall the update through the recovery environment. Microsoft is working on a fix for the problem.