Microsoft: Mumble mumble just ignore Windows Defender mumble mumble

Topic

New Reply

Remember the sfc /scannow stupidity – where scanning a perfectly good Windows installation triggered errors such as, “Windows Resource Protection foun
[See the full post at: Microsoft: Mumble mumble just ignore Windows Defender mumble mumble]

1 user thanked author for this post.

WildBill

Reply | Quote

Replies

I’m wondering if the just-released Microsoft Security Advisory CVE-2019-1167 re. a PowerShell vulnerability may relate. I checked the version on my Windows 10 1809 machine which is up-to-date except the July updates and it shows version 5 which would be affected. Then the question is will Microsoft automatically provide the fix in one of the updates or do we have to manually upgrade to PowerShell 6? Here’s the Microsoft bulletin:

https://github.com/PowerShell/PowerShell/security/advisories/GHSA-5frh-8cmj-gc59

Reply | Quote

brw2019 wrote:

I’m wondering if the just-released Microsoft Security Advisory CVE-2019-1167 re. a PowerShell vulnerability may relate. I checked the version on my Windows 10 1809 machine which is up-to-date except the July updates and it shows version 5 which would be affected. Then the question is will Microsoft automatically provide the fix in one of the updates or do we have to manually upgrade to PowerShell 6? Here’s the Microsoft bulletin:

https://github.com/PowerShell/PowerShell/security/advisories/GHSA-5frh-8cmj-gc59

Did you manually install Powershell Core on your PC? (probably not)

If not, you don’t need to worry about it being there & being vulnerable.

Powershell <> Powershell Core

1 user thanked author for this post.

b

Reply | Quote

No I didn’t install. It comes preinstalled in Windows 10. I don’t automatically enable it & have changed the setting so it uses Command prompt instead. But the version is the vulnerable one according to the link I provided so my question still stands as to whether or not Microsoft will address this.

 

Reply | Quote

It’s confusing but Powershell Core is not an edition that comes with Windows.

PowerShell Core is a downloadable, cross-platform, open-source edition.

See https://en.wikipedia.org/wiki/PowerShell for details.

Like 99.999% of Windows users, you and I do not need to worry about this vulnerability.

But Microsoft should do much better in clarifying this in the “Microsoft Security Advisory” to which you linked.

1 user thanked author for this post.

jabeattyauditor

Reply | Quote

Aha! Typical Microsoft doublespeak. Thanks much for clarifying.

 

Reply | Quote