Does Anyone Know What This Means?

[10ClarionSt]

It's something to do with MS withdrawing updates for W10. 

"A 2018 Windows vulnerability has been added to it's Exploited Vulnerability (KEV) catalog. Microsoft COM for Windows contains a deserialisation of untrusted data vulnerability that allows for privilege escalation and remote execution" 😲 😲 

 

[Old_Geezer]

I assume it's referring to a new "virus" type thing they've recently discovered. Unsure why you are being informed about it though.

[barry1010]

I don't think it is anything to do with MS withdrawing support for W10.

Vulnerabilities are frequently discovered, reported and fixed.

How did you come to be aware of this one?

[Togo]

It is a general warning to all windows 10 users. It does not indicate a specific, or local to you and your current sytem conditions, identified immediate thtreat but a possibility of one if you do not maintain best practice and keep up to date with all the available security patches. It is due, in the main, to the breattaking advances being made by the chip manufacturers and the resulting increased computing powrer that is now available. The crooks and scammers are much more enthused about increasing their capabilities and the end users and consumers are of course reluctant to spend the same sums on updating their systems. FRom Microsoft.

 
""Microsoft Component Object Model (COM) itself is not inherently a vulnerability. However, like any technology, it can be exploited if not properly secured. There have been instances where vulnerabilities related to COM have been identified and patched by Microsoft.
For example, a recent vulnerability (CVE-2023-32019) involved an information disclosure issue in the Windows Kernel. This vulnerability could allow an attacker to view heap memory from a privileged process, but it required specific conditions to be exploited.
To stay protected, it’s essential to keep your system updated with the latest security patches and follow best practices for system security.  If you have any specific concerns or need more details, feel free to ask!""

[Togo]

Sorry about the typos    ...   didn't have my specs on using the laptop. 

[Old_Geezer]

Not everyone can without throwing away a perfectly good piece of expensive tech all because the software has been increased in size.

 

No wonder the world has so much electronic hardware waste.

[barry1010]

Auntypoll, not all W10 machines can be upgraded to W11 without spending a lot of money.  I have managed to update two of my W10 machines but another one would need a new processor and that is soldered to the motherboard.   The laptop works great, it's fast and reliable.  I'll keep using it until it is no longer feasible to run W10 then I'll run it with Linux

[Togo]

Like I said   ...   the thieves and scammers are eager to upgrade their kit at every opportunity. They also tend to be willing to stay abreast of technological developements and don't baulk at putting in the effort to be informed. It is moving so fast that if you do not stay abreast of innovation and new practices then you will be almost excluded. Wait until AI is realy running at its full potential   ...   then you will need modern kit. Unless someone developes, and markets, a closed server system or network specifically for the vulnerable machines then they will become throw away or recycle items. Business opportunity there for someone. Annual subscription and web use only in the loop. Maybe millions want it.  

[Togo]

An upgraded processor does not need to be soldered Barry. It plugs into the existing socket and just needs new heat paste. A new fan is also a good idea at the same time. They cost buttons. What you do need as well is a new protocol module, TPM 2.00.(Trusted Platform Module). This plugs into the motherboard in one of the spare sockets. Also if you identify your motherboard (in your there is a list of processors available that are compatable with that board. Settings, Update and security, OS build and system info(on the right of screen)

[barry1010]

I put the TPM in to my other machines no problem.  It's getting the old processor out of the laptop that is the hard bit, lack of space etc.  Just not worth the time and trouble.

[Togo]

I wouldn't bother for a laptop either Barry. I will change a fan or hard drive, I have even put graphics cards in. Not the processor though. They are too closely matched to the main board spec to mess about with. I have a Radeon A8-3800 quad core 4 thread 2.4ghz processor to slot into the desktop when I give it the next stripdown and clean up. Will also put is a new main fan and processor cooling fan at the same time. They are both still running quiet but it is easier than cleaning them.   

[10ClarionSt]

Thanks for the replies folks. This actually popped up on my phone and I wondered what it meant. 

Togo is very knowledgeable and explains it very well. Thank you.

I cannot upgrade to W11 as a message from MS says my system is not compatible. Looks like a new one on the way. 

[barry1010]

No need to rush, 10C. W10 is still supported

[TheChair]

"An upgraded processor does not need to be soldered Barry".  I think, Togo, that you missed the bit where Barry said it was a laptop.

[10ClarionSt]

Actually barry I'm still using Windows 7 on my desktop. I can't get rid of it because lots of my files, folders and other things were created on that system and they won't open on W10, eg, I still use MS Office Professional 2000 on my desktop. Nothing has ever bettered it, but it doesn't work with W10. I don't do anything important on my desktop, no banking, purchases etc.

[Togo]

All the saved files on you desktop can be transferred to a new w10 or 11 system with a free to download app(a number are available) or by using an external drive. It is, I think, also possible to get an old version of office pro to run in w11 but you first need the original key or purchase id. You also have to remove it from the old machine first and take it out of safety mode. Hmm wouldn't like to run like that. 

[barry1010]

Out of interest, 10c, will your Office 2000 files open in other other office software such as Libre Office, Freesuite or Apache?