As mentioned this is more significant than a normal Patch Tuesday for a number of reasons. The first is a positive. This is likely to be the last patch before Microsoft officially launches the Windows 10 Creators Update. The company is expected to roll out the new feature update on April 11. While Patch Tuesday covers released Windows 10 versions, it is still important that the Windows landscape will change shortly. That said, April’s Cumulative Update will not be focused on the Creators Update. This release is also important because it is the first after Microsoft suspended February’s patch. The company decided not to release last month as it was dealing with an issue that could not be solved in time.
Windows 10 and IE Zero Day Flaws
Over the last two weeks, we have been covering a couple of zero-day vulnerabilities found in Windows 10 and Internet Explorer. Both flaws were discovered by Google Project Zero, which gives 90 days for vendors to issue a fix. Microsoft did not do so, which meant Project Zero made the vulnerabilities public. Microsoft has remained quiet on the subject. I speculated that the company would use March Patch Tuesday to fix these problems. Luckily, users had a fix in the form of two releases from 0patch, a security team that solves zero day flaws incrementally. Speaking to 0patch last week, the company told me that it too thinks Microsoft will issue fixes with the latest cumulative. As mentioned, Microsoft has yet to issue a changelog, so we will have to see if those issues have been solved.
