August 8, Microsoft released Tuesday patches, closing in its software 48 vulnerabilities, including 15 in versions from Windows 7 to Windows 10. Attacks about these vulnerabilities are unknown, but users are still advised to close them as soon as possible.
Microsoft marked 25 vulnerabilities as critical, 27 possible remote attacks of unprotected systems without physical access to computers. The SMB vulnerability is again closed, this time in the Windows Search search, but it has nothing to do with the extortion applications WannaCry and Petya, which also used the protocol.
Microsoft describes in CVE-2017-8620 the vulnerability of all versions of Windows, it can be used when an SMB connection is established and a Windows search marks objects in memory. An attacker can install programs, access and edit data, create new accounts with maximum permissions.
Edge and Internet Explorer got their patches, Windows 10 users should pay special attention to CVE-2017-0293, which reports the vulnerability of Windows PDF RCE. The problem is related to processing objects in memory, with the right attack, the hacker can get the user's rights. The exploit includes malicious content in PDF, which can be published on sites and downloaded via Edge or Internet Explorer.
After installing the patches, you will need to restart the computer.