Windows users need to be vigilant again. Following not one, but two botched security patches, a new update warning was issued to users of all major Windows versions. 

After Microsoft messed up the repair, the zero-day hack affected all Windows users, but a temporary... [+] Third-party repairs are now available

As reported by BleepingComputer, there is good news and bad news. The bad news is that security researchers have confirmed that this botched patch leaves a security hole in all Windows versions (including Windows 10, Windows 11, and Windows Server 2022) for use in hacking attacks that are "more powerful than the original version." The good news is that an unofficial patch has been released to buy time for users, and Microsoft is fixing it. 

Security researcher Abdelhamid Naceri publicly disclosed the vulnerability, which has been exploited by hackers. This vulnerability bypasses the previous vulnerability (CVE-2021-41379), which Microsoft believes was successfully fixed in November and enables hackers to elevate their privileges, allowing them to take over the computer and spread the attack to the victim's network. 

Microsoft has confirmed this new flaw after it told BleepingComputer: "We are aware of this disclosure and will take necessary measures to ensure the safety and protection of our customers." 

Unfortunately, it takes time to do the necessary things, and it has been nearly three weeks since Naceri first discovered the vulnerability. But this is where 0patch (pronounced "Zero Patch") intervenes. A third-party security expert has released a "micropatch" that is now available to all Windows users (download link) and a video to let them go through the update process: 

You need to register for a 0patch account and install its download agent to apply the fix, but 0patch is setting an impressive record for itself and quickly becoming the solution of choice for troubled Windows users. Last month, I wrote an article about this flaw and said that we should "pray for 0patch" and the team delivered it again. 

So when can we expect the official fix? Especially Naceri, he said, "You better wait and see how Microsoft will crack the patch again." But at least you now have a Band-Aid. 

Failed Microsoft patch exposes all Windows versions to zero-day attacks

The new zero-day attack affects all Windows versions, 0patch buys time