{"id":265520,"date":"2026-08-17T09:32:08","date_gmt":"2026-08-17T09:32:08","guid":{"rendered":"https:\/\/www.europesays.com\/ro\/265520\/"},"modified":"2026-08-17T09:32:08","modified_gmt":"2026-08-17T09:32:08","slug":"microsoft-actualizarea-windows-11-din-august-repara-420-de-vulnerabilitati","status":"publish","type":"post","link":"https:\/\/www.europesays.com\/ro\/265520\/","title":{"rendered":"Microsoft: actualizarea Windows 11 din august repar\u0103 420 de vulnerabilit\u0103\u021bi"},"content":{"rendered":"<p>Microsoft preg\u0103te\u0219te lansarea Patch Tuesday, actualizarea lunar\u0103 a sistemului de operare Windows 11. Luna asta s-au \u00eentrecut pe sine \u0219i rezolv\u0103 420 de vulnerabilit\u0103\u021bi.<\/p>\n<p>Actualizare important\u0103 pentru Windows 11<\/p>\n<p>Patch Tuesday din august 2026 de la Microsoft aduce una dintre cele mai mari actualiz\u0103ri de securitate ale anului, elimin\u00e2nd 421 de erori, inclusiv peste 40 evaluate ca fiind critice, conform Ghidului de actualiz\u0103ri de securitate Microsoft \u0219i mai multor furnizori de servicii de securitate care au urm\u0103rit lansarea.<\/p>\n<p>Actualizarea este caracterizat\u0103 de o eroare de driver de kernel exploatat\u0103 activ, o eroare de cre\u0219tere a privilegiilor dezv\u0103luit\u0103 public, legat\u0103 de un cercet\u0103tor aflat de mult timp \u00een conflict cu Microsoft, \u0219i un lan\u021b de execu\u021bie de cod la distan\u021b\u0103 \u00een SharePoint semnalat de Rapid7.<\/p>\n<p>Cea mai urgent\u0103 solu\u021bie este <a href=\"https:\/\/www.bleepingcomputer.com\/news\/microsoft\/microsoft-august-2026-patch-tuesday-fixes-400-flaws-3-zero-days\/\" target=\"_blank\" rel=\"nofollow noopener\">CVE-2026-68820<\/a>, o vulnerabilitate de tip \u201eutilizare dup\u0103 eliberare\u201d \u00een driverul Windows Ancillary Function Driver pentru WinSock (afd.sys), driverul de mod kernel care st\u0103 la baza API-ului Windows Sockets.<\/p>\n<p>Microsoft afirm\u0103 c\u0103 un atacator autentificat local poate declan\u0219a o condi\u021bie de concuren\u021b\u0103 prin intermediul unei aplica\u021bii special concepute pentru a ob\u021bine privilegii SYSTEM f\u0103r\u0103 interac\u021biunea utilizatorului. <\/p>\n<p><a href=\"https:\/\/research.checkpoint.com\/2026\/shattering-the-dream-when-a-job-offer-becomes-a-zero-day-attack\/\" target=\"_blank\" rel=\"nofollow noopener\">Check Point Research<\/a> a raportat c\u0103 Lazarus Group din Coreea de Nord a exploatat defectul ca parte a campaniei sale Operation Dream Job, folosind o re\u021bea de recrutare fals\u0103 \u0219i un vizualizator PDF cu troian pentru a implementa Troy, un nou backdoor, \u00eenainte de a escalada privilegiile \u0219i a instala o versiune actualizat\u0103 a rootkit-ului s\u0103u de mod kernel FudModule. Activitatea s-a concentrat pe organiza\u021bii din domeniul ap\u0103r\u0103rii, aerospa\u021bial \u0219i avia\u021biei din Europa, India \u0219i Brazilia. CISA a ad\u0103ugat CVE-2026-68820 \u00een catalogul s\u0103u de vulnerabilit\u0103\u021bi exploatate cunoscute, cu termen limit\u0103 de remediere 25 august.<\/p>\n<p>Microsoft a corectat \u0219i eroarea <a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-62832\" target=\"_blank\" rel=\"nofollow noopener\">CVE-2026-62832<\/a>, o eroare de tip \u201eelevation of privileges\u201d \u00een Serviciul de profiluri de utilizator Windows. Eroarea permite unui atacator autentificat care de\u021bine acredit\u0103ri pentru un alt cont local s\u0103 for\u021beze serviciul s\u0103 \u00eencarce setul de registry al acelui cont, posibil al unui administrator, acord\u00e2nd acces neautorizat la datele respective \u0219i drepturi de administrator. Microsoft a atribuit descoperirea unui cercet\u0103tor anonim, de\u0219i detaliile tehnice corespund cu LegacyHive, o dovad\u0103 de concept publicat\u0103 de cercet\u0103torul sub pseudonimul Nightmare Eclipse la doar c\u00e2teva ore dup\u0103 Patch Tuesday din iulie. Deoarece codul func\u021bional de exploatare circulase deja public, Microsoft a evaluat eroarea ca fiind mai susceptibil\u0103 de a fi exploatat\u0103 pe scar\u0103 mai larg\u0103.<\/p>\n<p>Lansarea este completat\u0103 de <a href=\"https:\/\/secarma.com\/12-08-2026-microsoft-august-patch-tuesday\" target=\"_blank\" rel=\"nofollow noopener\">CVE-2026-63520<\/a>, o vulnerabilitate de execu\u021bie de cod la distan\u021b\u0103 \u00een SharePoint Server, care \u00ee\u0219i are r\u0103d\u0103cinile \u00een instan\u021bierea nesigur\u0103 a tipurilor .NET din cadrul Business Connectivity Services. Rapid7 a dezv\u0103luit-o \u00eempreun\u0103 cu Microsoft ca a doua jum\u0103tate a unui lan\u021b de exploit-uri construit pentru Pwn2Own Berlin. \u00cempreun\u0103 cu CVE-2026-55040, ocolirea autentific\u0103rii JWT dezv\u0103luit\u0103 de Rapid7 \u00een iulie, cele dou\u0103 defecte permit unui atacator neautentificat s\u0103 execute cod pe un server SharePoint vulnerabil cu privilegiile contului s\u0103u de serviciu, f\u0103r\u0103 nicio acreditare.<\/p>\n","protected":false},"excerpt":{"rendered":"Microsoft preg\u0103te\u0219te lansarea Patch Tuesday, actualizarea lunar\u0103 a sistemului de operare Windows 11. Luna asta s-au \u00eentrecut pe&hellip;\n","protected":false},"author":2,"featured_media":265521,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_share_on_mastodon":"0"},"categories":[16],"tags":[2451,796,41,40,38,39,141,124,73408,2453],"class_list":["post-265520","post","type-post","status-publish","format-standard","has-post-thumbnail","category-tehnologie","tag-actualizari","tag-microsoft","tag-ro","tag-romana","tag-romania","tag-romanian","tag-technology","tag-tehnologie","tag-vulenarbilitati","tag-windows-11"],"share_on_mastodon":{"url":"https:\/\/pubeurope.com\/@ro\/117110160889105721","error":""},"_links":{"self":[{"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/posts\/265520","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/comments?post=265520"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/posts\/265520\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/media\/265521"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/media?parent=265520"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/categories?post=265520"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/tags?post=265520"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}