• Lots and lots of patches

    Martin Brinkmann at gHacks just posted his usual comprehensive list:

    • Windows 7:  9 vulnerabilities of which 2 are rated critical, 7 important
    • Windows 8.1: 11 vulnerabilities of which 4 are rated critical, 7 important
    • Windows 10 version 1703: 14 vulnerabilities of which 5 are rated critical, 9 important
    • Internet Explorer 11: 8  vulnerabilities, 7 critical, 1 important
    • Microsoft Edge: 28 vulnerabilities, 21 critical,  7 important, 1 moderate
    • And a new Security Advisory 4038556 regarding the WebBrowser Control

    The Security Portal lists 130 separate security patches issued between August 4 and 8.

    Win10 version 1703 Creators Update KB 4034674 goes up to build 15063.540. Five bug patches and a big bunch of security updates.

    Win10 version 1607 Anniversary Update KB 4034658 goes up to build 14393.1593. One bug fix, one fix to a bug introduced in the June update, and the security patches.

    Nine June 13 patches for Edge were re-released on August 4. This one, for example. No idea why.

    16 new Office patches. Haven’t yet had a chance to double-check the new list of August 1 patches with our old list (which had to be modified because the original list from Microsoft was wrong).

    As usual, I recommend that you sit and wait until the complaints start rolling in.

    UPDATE: There’s a slightly more usable aggregation of the security bulletins by Johannes Ullrich on the SANS Internet Storm Center.

    Also worth noting: There are no known exploits for any of the security patches.