[{"data":1,"prerenderedAt":1187},["ShallowReactive",2],{"I-maWsoucveWH7VpbVdiZ9YJQaZbJd1SsPfUgTAv7BA":3,"i-custom:keyboard-arrow-down":704,"i-custom:check":708,"i-custom:north-east":710,"kFwcqLm9oeiQmkkg24rPqMXN5zTbjmwVbnRqf-QW638":712},{"_site":4,"allMenuCtas":33,"allMenuItems":43,"allFooterMenuItems":207,"allFooterLinks":259,"allProductCategories":263,"allPlans":277,"allPatchCategories":288,"allCountries":622,"allPartnerCategories":664,"topBar":674,"allSocialLinks":695},{"globalSeo":5,"favicon":8,"faviconMetaTags":10,"locales":31},{"siteName":6,"titleSuffix":7},"0patch"," | 0patch",{"url":9},"https://www.datocms-assets.com/166020/1758709113-0patch_logo.svg",[11,19,23,27],{"tag":12,"attributes":13,"content":18},"link",{"sizes":14,"type":15,"rel":16,"href":17},"16x16","image/svg","icon","https://www.datocms-assets.com/166020/1758709113-0patch_logo.svg?auto=format&h=16&w=16",null,{"tag":12,"attributes":20,"content":18},{"sizes":21,"type":15,"rel":16,"href":22},"32x32","https://www.datocms-assets.com/166020/1758709113-0patch_logo.svg?auto=format&h=32&w=32",{"tag":12,"attributes":24,"content":18},{"sizes":25,"type":15,"rel":16,"href":26},"96x96","https://www.datocms-assets.com/166020/1758709113-0patch_logo.svg?auto=format&h=96&w=96",{"tag":12,"attributes":28,"content":18},{"sizes":29,"type":15,"rel":16,"href":30},"192x192","https://www.datocms-assets.com/166020/1758709113-0patch_logo.svg?auto=format&h=192&w=192",[32],"en",[34],{"id":35,"title":36,"reference":37,"externalLink":40,"variant":41,"publishTranslation":42},"7540649","Buy now",{"_modelApiKey":38,"slug":39},"page","pricing","","primary-green",true,[44,52,59,66,86,92,99,103,109,117,123,130,135,149,155,169,175],{"id":45,"children":46,"externalLink":40,"parent":47,"reference":49,"title":51,"description":40,"publishTranslation":42},"HC0Jv04qRuKuZzHWgfUcNw",[],{"id":48},"IL3SSc5ySpu4strWvTvZ_A",{"_modelApiKey":38,"slug":50},"in-the-media","In the media",{"id":53,"children":54,"externalLink":55,"parent":56,"reference":18,"title":58,"description":40,"publishTranslation":42},"Lf_fG7sJTeyY-YwXgCZM6A",[],"https://dist.0patch.com/download/latestagent",{"id":57},"InIESymQQManhdOiSJWRAA","Download 0patch Agent",{"id":60,"children":61,"externalLink":62,"parent":63,"reference":18,"title":65,"description":40,"publishTranslation":42},"H1wOcewmTj2BFNcm_3S4Pg",[],"https://support.0patch.com/hc/en-us/sections/22259984868242",{"id":64},"SWaM0xVVRG-TtXEDSCe6CA","User Manual",{"id":48,"children":67,"externalLink":40,"parent":83,"reference":18,"title":85,"description":40,"publishTranslation":42},[68,72],{"id":45,"title":51,"description":40,"parent":69,"reference":70,"externalLink":40,"publishTranslation":42,"children":71},{"id":48},{"_modelApiKey":38,"slug":50},[],{"id":73,"title":74,"description":74,"parent":75,"reference":76,"externalLink":40,"publishTranslation":42,"children":82},"GYvRoN-xQrK53JU9hoMC9g","From our blog",{"id":48},{"_modelApiKey":77,"slug":78,"title":79,"createdAt":80,"published":81},"article","micropatches-released-for-windows-storage-elevation-of-privilege-vulnerability-cv","Micropatches released for Windows Storage Elevation of Privilege Vulnerability (CVE-2026-21508)","2026-04-04T11:50:51+02:00","2026-03-31T00:00:00+02:00",[],{"id":84},"136494748","Featured",{"id":87,"children":88,"externalLink":40,"parent":18,"reference":89,"title":91,"description":40,"publishTranslation":42},"7537370",[],{"_modelApiKey":38,"slug":90},"windows10","Windows 10",{"id":93,"children":94,"externalLink":95,"parent":96,"reference":18,"title":97,"description":98,"publishTranslation":42},"KNhSd6vgR2mx15df8jrG1g",[],"https://support.0patch.com/hc/en-us",{"id":57},"Help Center","All sections",{"id":73,"children":100,"externalLink":40,"parent":101,"reference":102,"title":74,"description":74,"publishTranslation":42},[],{"id":48},{"_modelApiKey":77,"slug":78,"createdAt":80,"title":79,"published":81},{"id":104,"children":105,"externalLink":106,"parent":107,"reference":18,"title":108,"description":40,"publishTranslation":42},"YlQq8EI3S3Cjo6bX8KwScg",[],"https://www.0patch.com/files/0patch_End_User_License_Agreement.pdf",{"id":64},"License agreement",{"id":110,"children":111,"externalLink":40,"parent":112,"reference":113,"title":115,"description":116,"publishTranslation":42},"7537375",[],{"id":57},{"_modelApiKey":38,"slug":114},"contact","Contact us","Form demo",{"id":118,"children":119,"externalLink":40,"parent":18,"reference":120,"title":122,"description":40,"publishTranslation":42},"LT3XEcT4ToWK-CGDxHIvxA",[],{"_modelApiKey":38,"slug":121},"patches","Patches",{"id":124,"children":125,"externalLink":40,"parent":126,"reference":127,"title":129,"description":40,"publishTranslation":42},"C_hUUxSzRlWzUZJZiQKLWg",[],{"id":64},{"_modelApiKey":38,"slug":128},"privacy","Privacy policy",{"id":131,"children":132,"externalLink":40,"parent":18,"reference":133,"title":134,"description":40,"publishTranslation":42},"M7H9KVRYQbWzdi5przLT7w",[],{"_modelApiKey":38,"slug":39},"Pricing",{"id":57,"children":136,"externalLink":40,"parent":147,"reference":18,"title":148,"description":40,"publishTranslation":42},[137,140,143],{"id":53,"title":58,"description":40,"parent":138,"reference":18,"externalLink":55,"publishTranslation":42,"children":139},{"id":57},[],{"id":93,"title":97,"description":98,"parent":141,"reference":18,"externalLink":95,"publishTranslation":42,"children":142},{"id":57},[],{"id":110,"title":115,"description":116,"parent":144,"reference":145,"externalLink":40,"publishTranslation":42,"children":146},{"id":57},{"_modelApiKey":38,"slug":114},[],{"id":84},"Support",{"id":150,"children":151,"externalLink":40,"parent":18,"reference":152,"title":154,"description":40,"publishTranslation":42},"7540650",[],{"_modelApiKey":38,"slug":153},"blog","Blog",{"id":64,"children":156,"externalLink":40,"parent":167,"reference":18,"title":168,"description":40,"publishTranslation":42},[157,160,163],{"id":60,"title":65,"description":40,"parent":158,"reference":18,"externalLink":62,"publishTranslation":42,"children":159},{"id":64},[],{"id":104,"title":108,"description":40,"parent":161,"reference":18,"externalLink":106,"publishTranslation":42,"children":162},{"id":64},[],{"id":124,"title":129,"description":40,"parent":164,"reference":165,"externalLink":40,"publishTranslation":42,"children":166},{"id":64},{"_modelApiKey":38,"slug":128},[],{"id":84},"Documents",{"id":170,"children":171,"externalLink":40,"parent":18,"reference":172,"title":174,"description":40,"publishTranslation":42},"SH5u-VrlQeKwYFXpbtstHw",[],{"_modelApiKey":38,"slug":173},"partners","Partners",{"id":84,"children":176,"externalLink":40,"parent":18,"reference":18,"title":206,"description":40,"publishTranslation":42},[177,186,196],{"id":48,"title":85,"description":40,"parent":178,"reference":18,"externalLink":40,"publishTranslation":42,"children":179},{"id":84},[180,183],{"id":45,"title":51,"description":40,"parent":181,"reference":182,"externalLink":40,"publishTranslation":42},{"id":48},{"_modelApiKey":38,"slug":50},{"id":73,"title":74,"description":74,"parent":184,"reference":185,"externalLink":40,"publishTranslation":42},{"id":48},{"_modelApiKey":77,"slug":78,"createdAt":80,"title":79,"published":81},{"id":57,"title":148,"description":40,"parent":187,"reference":18,"externalLink":40,"publishTranslation":42,"children":188},{"id":84},[189,191,193],{"id":53,"title":58,"description":40,"parent":190,"reference":18,"externalLink":55,"publishTranslation":42},{"id":57},{"id":93,"title":97,"description":98,"parent":192,"reference":18,"externalLink":95,"publishTranslation":42},{"id":57},{"id":110,"title":115,"description":116,"parent":194,"reference":195,"externalLink":40,"publishTranslation":42},{"id":57},{"_modelApiKey":38,"slug":114},{"id":64,"title":168,"description":40,"parent":197,"reference":18,"externalLink":40,"publishTranslation":42,"children":198},{"id":84},[199,201,203],{"id":60,"title":65,"description":40,"parent":200,"reference":18,"externalLink":62,"publishTranslation":42},{"id":64},{"id":104,"title":108,"description":40,"parent":202,"reference":18,"externalLink":106,"publishTranslation":42},{"id":64},{"id":124,"title":129,"description":40,"parent":204,"reference":205,"externalLink":40,"publishTranslation":42},{"id":64},{"_modelApiKey":38,"slug":128},"Resources",[208,214,218,222,226,231,235,239,244,249,254],{"id":209,"column":210,"children":211,"externalLink":40,"parent":18,"reference":212,"title":122,"description":40,"publishTranslation":42},"Z7v-uM0cTOOBdk-s10IiJA",1,[],{"__typename":213,"_modelApiKey":38,"slug":121},"PageRecord",{"id":215,"column":210,"children":216,"externalLink":40,"parent":18,"reference":217,"title":134,"description":40,"publishTranslation":42},"Yr6Go03oTdSCq8pxdWdUsg",[],{"__typename":213,"_modelApiKey":38,"slug":39},{"id":219,"column":210,"children":220,"externalLink":40,"parent":18,"reference":221,"title":174,"description":40,"publishTranslation":42},"Ds1JBCIHQQKM3pJdA6ywFA",[],{"__typename":213,"_modelApiKey":38,"slug":173},{"id":223,"column":210,"children":224,"externalLink":40,"parent":18,"reference":225,"title":115,"description":40,"publishTranslation":42},"d9N0wsZhQsm7WLVqkmUWVQ",[],{"__typename":213,"_modelApiKey":38,"slug":114},{"id":227,"column":228,"children":229,"externalLink":40,"parent":18,"reference":230,"title":154,"description":40,"publishTranslation":42},"O9Oqpya5TZafs7o4l_8Nvg",2,[],{"__typename":213,"_modelApiKey":38,"slug":153},{"id":232,"column":228,"children":233,"externalLink":40,"parent":18,"reference":234,"title":51,"description":40,"publishTranslation":42},"QbA-8ChQT-eVxrfVlZzKaA",[],{"__typename":213,"_modelApiKey":38,"slug":50},{"id":236,"column":228,"children":237,"externalLink":95,"parent":18,"reference":18,"title":238,"description":40,"publishTranslation":42},"GcPu0RJNQu2cmfpL_Us1Lg",[],"Help center ",{"id":240,"column":228,"children":241,"externalLink":242,"parent":18,"reference":18,"title":243,"description":40,"publishTranslation":42},"NwREnz0XTvOJ93OHko_7xw",[],"https://status.0patch.com/","Status page",{"id":245,"column":228,"children":246,"externalLink":40,"parent":18,"reference":247,"title":248,"description":40,"publishTranslation":42},"UPh4X1tXRt24AhzNHaztFg",[],{"__typename":213,"_modelApiKey":38,"slug":114},"Write to support",{"id":250,"column":228,"children":251,"externalLink":252,"parent":18,"reference":18,"title":253,"description":40,"publishTranslation":42},"bUWsPw9eRvG4Ycl7j0yONg",[],"mailto:security@0patch.com","Report a security issue",{"id":255,"column":228,"children":256,"externalLink":257,"parent":18,"reference":18,"title":258,"description":40,"publishTranslation":42},"eB66OgJwSXSF0UWkhz1snQ",[],"https://www.0patch.com/files/0patch.asc","PGP KEY",[260],{"externalLink":40,"reference":261,"title":262,"publishTranslation":42},{"_modelApiKey":38,"slug":128},"Privacy",[264,269,273],{"__typename":265,"id":266,"name":267,"slug":268},"ProductCategoryRecord","Am0QLeVvQCuP42oCnhKABQ","Office","office",{"__typename":265,"id":270,"name":271,"slug":272},"VFAYSlgkRneu1oHcTKcpwQ","Server","server",{"__typename":265,"id":274,"name":275,"slug":276},"UNiVGxy_QViVXTpaSLXZlQ","Windows","windows",[278,282,285],{"__typename":279,"id":280,"title":281},"PlanRecord","T-QQY6XRSjeGbmXIK5kNCw","Free",{"__typename":279,"id":283,"title":284},"TOtXWfDyTjyO3H3OW_HRtQ","Professional",{"__typename":279,"id":286,"title":287},"KJjNQcHiRVa_mZqx_GtIrg","Enterprise",[289,423,520,561,605],{"__typename":290,"_allReferencingPatchesMeta":291,"_allReferencingPatches":293,"_modelApiKey":418,"name":419,"id":420,"slug":421,"icon":18,"supportDate":422},"PatchCategoryRecord",{"count":292},19,[294,302,310,317,325,333,340,346,352,358,364,370,376,382,388,394,400,406,412],{"id":295,"title":296,"description":297,"plans":298},"CHBzDqmWSkiUggiwCycMKQ","0day patches","\u003Cp>Patches for vulnerabilities the original vendor has not yet patched - both for legacy products and products that are still under official vendor support\u003C/p>\n\u003Cp>\u003Cstrong>\u003Ca href=\"/patches?type=0day\" target=\"_blank\" rel=\"noopener\">Click to see the full list of our 0day patches\u003C/a>\u003C/strong>\u003C/p>",[299,300,301],{"id":280,"title":281},{"id":283,"title":284},{"id":286,"title":287},{"id":303,"title":304,"description":305,"plans":306},"W1zipVenRuaCpMLlbChNkg","Free patches","\u003Cp>Patches for \"0day\" vulnerabilities are generally free until the vendor has provided an official fix\u003C/p>\n\u003Cp>\u003Cstrong>\u003Ca href=\"/patches?plan=free\" target=\"_blank\" rel=\"noopener\">Click to see the full list of our free patches\u003C/a>\u003C/strong>\u003C/p>",[307,308,309],{"id":280,"title":281},{"id":283,"title":284},{"id":286,"title":287},{"id":311,"title":312,"description":313,"plans":314},"JMf6o8nLRh2YNbSjeoWSbg","All patches","\u003Cp>All our patches we have ever issued, or will ever issue, including 0day and legacy patches\u003C/p>",[315,316],{"id":283,"title":284},{"id":286,"title":287},{"id":318,"title":319,"description":320,"plans":321},"N2SosqbOST-U5Q3FTqKT-g","Multi factor authentication (MFA)","\u003Cp>Require one-time code from an authenticator app when accessing 0patch Central\u003C/p>",[322,323,324],{"id":280,"title":281},{"id":283,"title":284},{"id":286,"title":287},{"id":326,"title":327,"description":328,"plans":329},"Aurt0TQWT3qrx--H6Bvtnw","0patch console - local management","\u003Cp>0patch Agent is managed locally using 0patch Console application\u003C/p>",[330,331,332],{"id":280,"title":281},{"id":283,"title":284},{"id":286,"title":287},{"id":334,"title":335,"description":336,"plans":337},"dvNfP_7ZQ6uyUtJO3ADbJQ","Standard email support","\u003Cp>Email support with 24-hour response time\u003C/p>",[338,339],{"id":283,"title":284},{"id":286,"title":287},{"id":341,"title":342,"description":343,"plans":344},"DRZtt1FJQ2OW742_5ZdcOQ","Central management","\u003Cp>Centrally manage and monitor all your 0patch Agents from web-based 0patch Central\u003C/p>",[345],{"id":286,"title":287},{"id":347,"title":348,"description":349,"plans":350},"C7j04lkDSSmPT2ikq9grug","IP address allow-listing","\u003Cp>Restricting access to 0patch Central so only users connecting from approved IP addresses can use it\u003C/p>",[351],{"id":286,"title":287},{"id":353,"title":354,"description":355,"plans":356},"aLo8Rj7YQsufFNozN8C6lw","Unattended agent installation","\u003Cp>Deploy 0patch Agent remotely without user interaction\u003C/p>",[357],{"id":286,"title":287},{"id":359,"title":360,"description":361,"plans":362},"dJECbsVMSGm7_ObPWiWSDQ","Agent auto-registration","\u003Cp>0patch Agent can automatically register itself to your 0patch account\u003C/p>",[363],{"id":286,"title":287},{"id":365,"title":366,"description":367,"plans":368},"WHM0-Mj0Sr2WZ1LwhTI9Dw","Silent run","\u003Cp>0patch Agent operates entirely in the background without showing notifications or prompts to the user\u003C/p>",[369],{"id":286,"title":287},{"id":371,"title":372,"description":373,"plans":374},"Zjk5YWqcS2al2C2OTEH82w","Patching policies","\u003Cp>Select which patches are enabled for which groups of computers, and whether newly issued patches are initially enabled or disabled\u003C/p>",[375],{"id":286,"title":287},{"id":377,"title":378,"description":379,"plans":380},"DXTTXN2ITtmy-Bclo1_iKQ","Computer groups","\u003Cp>Organize your computers in groups to simplify management and apply different policies to different sets of computers\u003C/p>",[381],{"id":286,"title":287},{"id":383,"title":384,"description":385,"plans":386},"Vna1HyM9Q4-kwJshD0-4Ag","Multi user support","\u003Cp>Add any number of users to 0patch Central\u003C/p>",[387],{"id":286,"title":287},{"id":389,"title":390,"description":391,"plans":392},"MZheRUWKRHuS_M3sPAvxWw","User roles","\u003Cp>Assign different roles to 0patch Central users to limit their access\u003C/p>",[393],{"id":286,"title":287},{"id":395,"title":396,"description":397,"plans":398},"em07-dXcQ2Of2IhpZzUeDQ","Mandatory MFA","\u003Cp>Administrator can make multi factor authentication mandatory for all 0patch Central users\u003C/p>",[399],{"id":286,"title":287},{"id":401,"title":402,"description":403,"plans":404},"DJ9WqVROQWiRnUxDr8ckeQ","SAML single sign-on","\u003Cp>Login to 0patch Central through your identity provider using the SAML protocol\u003C/p>",[405],{"id":286,"title":287},{"id":407,"title":408,"description":409,"plans":410},"c73GoxWmTXS5muxHXFl3HA","SCIM provisioning","\u003Cp>Manage 0patch Central users with your identity provider using SCIM protocol\u003C/p>",[411],{"id":286,"title":287},{"id":413,"title":414,"description":415,"plans":416},"QM6mK9qtTBe5OtMWfVnvvg","Professional services","\u003Cp>Custom patches and additional professional services are available to large customers\u003C/p>",[417],{"id":286,"title":287},"patch_category","Features","T2nlr7wWS3eNfLE8hfA1ew","features","2025-12-05",{"__typename":290,"_allReferencingPatchesMeta":424,"_allReferencingPatches":426,"_modelApiKey":418,"name":504,"id":505,"slug":506,"icon":507,"supportDate":519},{"count":425},11,[427,434,441,448,455,462,469,476,483,490,497],{"id":428,"title":429,"description":430,"plans":431},"Wn-S2pccQbKHM4Qi_CFf0Q","Windows 11 22H2 patches","\u003Cp>Windows 11 22H2 post-end-of-support patches\u003C/p>\n\u003Cp>\u003Cstrong>\u003Ca href=\"/patches?product=Windows+11\" target=\"_blank\" rel=\"noopener\">Click to see the full list of our Windows 11 patches\u003C/a>\u003C/strong>\u003C/p>",[432,433],{"id":283,"title":284},{"id":286,"title":287},{"id":435,"title":436,"description":437,"plans":438},"KLIOm9vRTpWNef0hEYPZRw","Windows 11 21H2 patches","\u003Cp>Windows 11 21H2 post-end-of-support patches\u003C/p>\n\u003Cp>\u003Cstrong>\u003Ca href=\"/patches?product=Windows+11\" target=\"_blank\" rel=\"noopener\">Click to see the full list of our Windows 11 patches\u003C/a>\u003C/strong>\u003C/p>",[439,440],{"id":283,"title":284},{"id":286,"title":287},{"id":442,"title":443,"description":444,"plans":445},"Z-_sUVTSRcyneegSkg6tEg","Windows 10 22H2 post-EOS patches","\u003Cp>Windows 10 22H2 post-end-of-support patches, for computers without Extended Security Updates (ESU), or computers with any full year of ESU updates installed\u003C/p>\n\u003Cp>\u003Cstrong>\u003Ca href=\"/patches?product=Windows+10\" target=\"_blank\" rel=\"noopener\">Click to see the full list of our Windows 10 patches\u003C/a>\u003C/strong>\u003C/p>",[446,447],{"id":283,"title":284},{"id":286,"title":287},{"id":449,"title":450,"description":451,"plans":452},"OG3314TtS_mGEWsQ7I7rVg","Windows 10 21H2 patches","\u003Cp>Windows 10 21H2 post-end-of-support patches\u003C/p>\n\u003Cp>\u003Cstrong>\u003Ca href=\"/patches?product=Windows+10\" target=\"_blank\" rel=\"noopener\">Click to see the full list of our Windows 10 patches\u003C/a>\u003C/strong>\u003C/p>",[453,454],{"id":283,"title":284},{"id":286,"title":287},{"id":456,"title":457,"description":458,"plans":459},"d-2ES_YuR7C4QuSmcXgi0Q","Windows 10 21H1 patches","\u003Cp>Windows 10 21H1 post-end-of-support patches\u003C/p>\n\u003Cp>\u003Cstrong>\u003Ca href=\"/patches?product=Windows+10\" target=\"_blank\" rel=\"noopener\">Click to see the full list of our Windows 10 patches\u003C/a>\u003C/strong>\u003C/p>",[460,461],{"id":283,"title":284},{"id":286,"title":287},{"id":463,"title":464,"description":465,"plans":466},"R-A6Aep1TCCVLYwFbfK3Sw","Windows 10 20H2 patches","\u003Cp>Windows 10 20H2 post-end-of-support patches\u003C/p>\n\u003Cp>\u003Cstrong>\u003Ca href=\"/patches?product=Windows+10\" target=\"_blank\" rel=\"noopener\">Click to see the full list of our Windows 10 patches\u003C/a>\u003C/strong>\u003C/p>",[467,468],{"id":283,"title":284},{"id":286,"title":287},{"id":470,"title":471,"description":472,"plans":473},"Dg4FaK9fS8KTa1o3Qhor6w","Windows 10 2004 patches","\u003Cp>Windows 10 2004 post-end-of-support patches\u003C/p>\n\u003Cp>\u003Cstrong>\u003Ca href=\"/patches?product=Windows+10\" target=\"_blank\" rel=\"noopener\">Click to see the full list of our Windows 10 patches\u003C/a>\u003C/strong>\u003C/p>",[474,475],{"id":286,"title":287},{"id":283,"title":284},{"id":477,"title":478,"description":479,"plans":480},"MJlLPyxqTcy9ys2UaZYNKQ","Windows 10 v1909 patches","\u003Cp>Windows 10 1909 post-end-of-support patches\u003C/p>\n\u003Cp>\u003Cstrong>\u003Ca href=\"/patches?product=Windows+10\" target=\"_blank\" rel=\"noopener\">Click to see the full list of our Windows 10 patches\u003C/a>\u003C/strong>\u003C/p>",[481,482],{"id":283,"title":284},{"id":286,"title":287},{"id":484,"title":485,"description":486,"plans":487},"GscjCa1TQOe5p5Or7g2qyw","Windows 10 v1809 patches","\u003Cp>Windows 10 1809 post-end-of-support patches\u003C/p>\n\u003Cp>\u003Cstrong>\u003Ca href=\"/patches?product=Windows+10\" target=\"_blank\" rel=\"noopener\">Click to see the full list of our Windows 10 patches\u003C/a>\u003C/strong>\u003C/p>",[488,489],{"id":283,"title":284},{"id":286,"title":287},{"id":491,"title":492,"description":493,"plans":494},"OeQ8xMmJTmadIiPcKYkhvw","Windows 10 v1803 patches","\u003Cp>Windows 10 1803 post-end-of-support patches\u003C/p>\n\u003Cp>\u003Cstrong>\u003Ca href=\"/patches?product=Windows+10\" target=\"_blank\" rel=\"noopener\">Click to see the full list of our Windows 10 patches\u003C/a>\u003C/strong>\u003C/p>",[495,496],{"id":283,"title":284},{"id":286,"title":287},{"id":498,"title":499,"description":500,"plans":501},"Obe8z8snRYGoLT6BZyzhZw","Windows 7 post-EOS and post-ESU patches","\u003Cp>Windows 7 post-end-of-support patches, for computers without Extended Security Updates (ESU), or computers with any full year of ESU updates installed\u003C/p>",[502,503],{"id":283,"title":284},{"id":286,"title":287},"Windows Patches","DXze3dvpTu-HF132vKjSug","microsoft-windows-xp",{"alt":508,"url":509,"width":510,"height":510,"responsiveImage":511},"Windows 11 logo","https://www.datocms-assets.com/166020/1764600963-win11.png",300,{"srcSet":512,"webpSrcSet":513,"sizes":514,"src":515,"width":516,"height":516,"aspectRatio":210,"alt":508,"title":18,"bgColor":517,"base64":518},"https://www.datocms-assets.com/166020/1764600963-win11.png?auto=compress&crop=focalpoint&fit=crop&h=40 40w,https://www.datocms-assets.com/166020/1764600963-win11.png?auto=compress&crop=focalpoint&dpr=1.5&fit=crop&h=40 60w,https://www.datocms-assets.com/166020/1764600963-win11.png?auto=compress&crop=focalpoint&dpr=2&fit=crop&h=40 80w,https://www.datocms-assets.com/166020/1764600963-win11.png?auto=compress&crop=focalpoint&dpr=3&fit=crop&h=40 120w,https://www.datocms-assets.com/166020/1764600963-win11.png?auto=compress&crop=focalpoint&dpr=4&fit=crop&h=40 160w","https://www.datocms-assets.com/166020/1764600963-win11.png?auto=compress&crop=focalpoint&fit=crop&fm=webp&h=40 40w,https://www.datocms-assets.com/166020/1764600963-win11.png?auto=compress&crop=focalpoint&dpr=1.5&fit=crop&fm=webp&h=40 60w,https://www.datocms-assets.com/166020/1764600963-win11.png?auto=compress&crop=focalpoint&dpr=2&fit=crop&fm=webp&h=40 80w,https://www.datocms-assets.com/166020/1764600963-win11.png?auto=compress&crop=focalpoint&dpr=3&fit=crop&fm=webp&h=40 120w,https://www.datocms-assets.com/166020/1764600963-win11.png?auto=compress&crop=focalpoint&dpr=4&fit=crop&fm=webp&h=40 160w","(max-width: 40px) 100vw, 40px","https://www.datocms-assets.com/166020/1764600963-win11.png?auto=compress&crop=focalpoint&fit=crop&h=40",40,"#0278cf","data:image/png;base64,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","2025-06-25",{"__typename":290,"_allReferencingPatchesMeta":521,"_allReferencingPatches":523,"_modelApiKey":418,"name":545,"id":546,"slug":547,"icon":548,"supportDate":519},{"count":522},3,[524,531,538],{"id":525,"title":526,"description":527,"plans":528},"DMZZcGMvQfaRElACxvHXyA","Windows Server 2012 R2 post-EOS patches","\u003Cp>Windows Server 2012 R2 post-end-of-support patches, for computers without Extended Security Updates (ESU), or computers with any full year of ESU updates installed\u003C/p>\n\u003Cp>\u003Cstrong>\u003Ca href=\"/patches?product=Windows+Server+2012+R2\" target=\"_blank\" rel=\"noopener\">Click to see the full list of our Windows Server 2012 R2 patches\u003C/a>\u003C/strong>\u003C/p>",[529,530],{"id":283,"title":284},{"id":286,"title":287},{"id":532,"title":533,"description":534,"plans":535},"ZaeezXKkT3KGln5CQ4NH9w","Windows Server 2012 post-EOS patches","\u003Cp>Windows Server 2012 post-end-of-support patches, for computers without Extended Security Updates (ESU), or computers with any full year of ESU updates installed\u003C/p>\n\u003Cp>\u003Cstrong>\u003Ca href=\"/patches?product=Windows+Server+2012\" target=\"_blank\" rel=\"noopener\">Click to see the full list of our Windows Server 2012 patches\u003C/a>\u003C/strong>\u003C/p>",[536,537],{"id":283,"title":284},{"id":286,"title":287},{"id":539,"title":540,"description":541,"plans":542},"RYxw9xwXR3-OWnsdr8dFEg","Windows Server 2008 R2 post-EOS and post-ESU patches","\u003Cp>Windows Server 2008 R2 post-end-of-support patches, for computers without Extended Security Updates (ESU), or computers with any full year of ESU updates installed\u003C/p>\n\u003Cp>\u003Cstrong>\u003Ca href=\"/patches?product=Windows+Server+2008+R2\" target=\"_blank\" rel=\"noopener\">Click to see the full list of our Windows Server 2008 R2 patches\u003C/a>\u003C/strong>\u003C/p>",[543,544],{"id":283,"title":284},{"id":286,"title":287},"Windows Server Patches","J7WLPCrKS7i7B8sAyJpKWg","microsoft-windows-vista",{"alt":549,"url":550,"width":551,"height":510,"responsiveImage":552},"Windows Server 2012-2022 logo","https://www.datocms-assets.com/166020/1764600963-srv2012_2022.png",296,{"srcSet":553,"webpSrcSet":554,"sizes":555,"src":556,"width":557,"height":516,"aspectRatio":558,"alt":549,"title":18,"bgColor":559,"base64":560},"https://www.datocms-assets.com/166020/1764600963-srv2012_2022.png?auto=compress&crop=focalpoint&fit=crop&h=40 39w,https://www.datocms-assets.com/166020/1764600963-srv2012_2022.png?auto=compress&crop=focalpoint&dpr=1.5&fit=crop&h=40 58w,https://www.datocms-assets.com/166020/1764600963-srv2012_2022.png?auto=compress&crop=focalpoint&dpr=2&fit=crop&h=40 78w,https://www.datocms-assets.com/166020/1764600963-srv2012_2022.png?auto=compress&crop=focalpoint&dpr=3&fit=crop&h=40 117w,https://www.datocms-assets.com/166020/1764600963-srv2012_2022.png?auto=compress&crop=focalpoint&dpr=4&fit=crop&h=40 156w","https://www.datocms-assets.com/166020/1764600963-srv2012_2022.png?auto=compress&crop=focalpoint&fit=crop&fm=webp&h=40 39w,https://www.datocms-assets.com/166020/1764600963-srv2012_2022.png?auto=compress&crop=focalpoint&dpr=1.5&fit=crop&fm=webp&h=40 58w,https://www.datocms-assets.com/166020/1764600963-srv2012_2022.png?auto=compress&crop=focalpoint&dpr=2&fit=crop&fm=webp&h=40 78w,https://www.datocms-assets.com/166020/1764600963-srv2012_2022.png?auto=compress&crop=focalpoint&dpr=3&fit=crop&fm=webp&h=40 117w,https://www.datocms-assets.com/166020/1764600963-srv2012_2022.png?auto=compress&crop=focalpoint&dpr=4&fit=crop&fm=webp&h=40 156w","(max-width: 39px) 100vw, 39px","https://www.datocms-assets.com/166020/1764600963-srv2012_2022.png?auto=compress&crop=focalpoint&fit=crop&h=40",39,0.975,"#0b1f8e","data:image/png;base64,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",{"__typename":290,"_allReferencingPatchesMeta":562,"_allReferencingPatches":564,"_modelApiKey":418,"name":593,"id":594,"slug":595,"icon":596,"supportDate":519},{"count":563},4,[565,572,579,586],{"id":566,"title":567,"description":568,"plans":569},"axmNaLDGSs2BLTpJNU-fuQ","Microsoft Office 2019 post-EOS patches","\u003Cp>Microsoft Office 2019 post-end-of-support patches\u003C/p>\n\u003Cp>\u003Cstrong>\u003Ca href=\"/patches?product=Office+2019\" target=\"_blank\" rel=\"noopener\">Click to see the full list of our Microsoft Office 2019 patches\u003C/a>\u003C/strong>\u003C/p>",[570,571],{"id":283,"title":284},{"id":286,"title":287},{"id":573,"title":574,"description":575,"plans":576},"MkFk40IJQhCcXnIO2ZDd4Q","Microsoft Office 2016 post-EOS patches","\u003Cp>Microsoft Office 2016 post-end-of-support patches\u003C/p>\n\u003Cp>\u003Cstrong>\u003Ca href=\"/patches?product=Office+2016\" target=\"_blank\" rel=\"noopener\">Click to see the full list of our Microsoft Office 2016 patches\u003C/a>\u003C/strong>\u003C/p>",[577,578],{"id":283,"title":284},{"id":286,"title":287},{"id":580,"title":581,"description":582,"plans":583},"FFqWfGxfQF2q0uyjyRjVWg","Microsoft Office 2013 post-EOS patches","\u003Cp>Microsoft Office 2013 post-end-of-support patches\u003C/p>\n\u003Cp>\u003Cstrong>\u003Ca href=\"/patches?product=Office+2013\" target=\"_blank\" rel=\"noopener\">Click to see the full list of our Microsoft Office 2013 patches\u003C/a>\u003C/strong>\u003C/p>",[584,585],{"id":283,"title":284},{"id":286,"title":287},{"id":587,"title":588,"description":589,"plans":590},"XFYgrsOyRpeuEXk29M4z9g","Microsoft Office 2010 post-EOS patches","\u003Cp>Microsoft Office 2010 post-end-of-support patches\u003C/p>\n\u003Cp>\u003Cstrong>\u003Ca href=\"/patches?product=Office+2010\" target=\"_blank\" rel=\"noopener\">Click to see the full list of our Microsoft Office 2010 patches\u003C/a>\u003C/strong>\u003C/p>",[591,592],{"id":283,"title":284},{"id":286,"title":287},"Microsoft Office Patches","VH2unwR4RjycDA1o_6eSFw","microsoft-windows-7",{"alt":597,"url":598,"width":510,"height":510,"responsiveImage":599},"Microsoft Office logo","https://www.datocms-assets.com/166020/1764600963-office2013_2019.png",{"srcSet":600,"webpSrcSet":601,"sizes":514,"src":602,"width":516,"height":516,"aspectRatio":210,"alt":597,"title":18,"bgColor":603,"base64":604},"https://www.datocms-assets.com/166020/1764600963-office2013_2019.png?auto=compress&crop=focalpoint&fit=crop&h=40 40w,https://www.datocms-assets.com/166020/1764600963-office2013_2019.png?auto=compress&crop=focalpoint&dpr=1.5&fit=crop&h=40 60w,https://www.datocms-assets.com/166020/1764600963-office2013_2019.png?auto=compress&crop=focalpoint&dpr=2&fit=crop&h=40 80w,https://www.datocms-assets.com/166020/1764600963-office2013_2019.png?auto=compress&crop=focalpoint&dpr=3&fit=crop&h=40 120w,https://www.datocms-assets.com/166020/1764600963-office2013_2019.png?auto=compress&crop=focalpoint&dpr=4&fit=crop&h=40 160w","https://www.datocms-assets.com/166020/1764600963-office2013_2019.png?auto=compress&crop=focalpoint&fit=crop&fm=webp&h=40 40w,https://www.datocms-assets.com/166020/1764600963-office2013_2019.png?auto=compress&crop=focalpoint&dpr=1.5&fit=crop&fm=webp&h=40 60w,https://www.datocms-assets.com/166020/1764600963-office2013_2019.png?auto=compress&crop=focalpoint&dpr=2&fit=crop&fm=webp&h=40 80w,https://www.datocms-assets.com/166020/1764600963-office2013_2019.png?auto=compress&crop=focalpoint&dpr=3&fit=crop&fm=webp&h=40 120w,https://www.datocms-assets.com/166020/1764600963-office2013_2019.png?auto=compress&crop=focalpoint&dpr=4&fit=crop&fm=webp&h=40 160w","https://www.datocms-assets.com/166020/1764600963-office2013_2019.png?auto=compress&crop=focalpoint&fit=crop&h=40","#eb3c00","data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABgAAAAYCAMAAADXqc3KAAABSlBMVEXqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPADqPAAMDLSTAAAAbnRSTlMAAQIDBAUGBwgJCgsMDQ4PEBESExQVFhcYGRobHB0eHyAiIyQlJicoKSorLS4vMTIzNDU2Nzk6Ozw9P0BBQkNERkpMTU5PUFFSVVZXWVpbXF1eX2BhYmNkZmdoaWpsbW5vcHFzdXZ4fH5/gIKDhBdTJiUAAAERSURBVHjabdE5doQwDAZgSV6AwMsU06TN/e+TM6SfyeBNUsALTeKGhz7wL8sWzoU21yd8fN6Xn++vAGDruzcdyFhjrBuAK0mo4Kz3PL89OrxvyA0s+Un9Cg38bZPUtrLOmXleUSvctrk4W1obZHVZtscJ0zo5Ral1FsAjfG7gDCo3iLmIknU1w4BybtnwyqmAaAsXzhhfDZ4hMjJrhVwy7B1iiIWycIPktO90flWIz8ATctY8QERQtQEUVh6ARIjQT86Mow7OGDqsg+IQcs4CjT8KXzB7Rwraujo6Qe3g7TEF4dTHHmGEGwKVFF4ddkhXu8yxjqFd7T7qzDmG9LzgWqWkuO//QS4xhf0viDJzvctfA1KXpEpvxgMAAAAASUVORK5CYII=",{"__typename":290,"_allReferencingPatchesMeta":606,"_allReferencingPatches":607,"_modelApiKey":418,"name":614,"id":615,"slug":616,"icon":617,"supportDate":519},{"count":210},[608],{"id":609,"title":610,"description":611,"plans":612},"OuJP-mYgRRi-wc8RTcRbUg","Other products patches","\u003Cp>We occasionally patch other Windows products, for instance when a critical vulnerability becomes known and the vendor does not provide an official patch in a timely manner\u003C/p>",[613],{"id":283,"title":284},"Other","BrWA-hAsQYSROgTvF-1ecA","microsoft-windows-11",{"alt":618,"url":619,"width":620,"height":621,"responsiveImage":18},"Windows 7","https://www.datocms-assets.com/166020/1754390080-layer1.svg",44,38,[623,628,632,636,640,644,648,652,656,660],{"__typename":624,"id":625,"name":626,"slug":627},"CountryRecord","WYcngTKjTLSCPKXF1CGc3Q","Germany","germany",{"__typename":624,"id":629,"name":630,"slug":631},"W7K_V8xIQ4esd1pdctvLRg","Switzerland","switzerland",{"__typename":624,"id":633,"name":634,"slug":635},"YCAHqeAMSp2PAVyP3KGV4w","International","international",{"__typename":624,"id":637,"name":638,"slug":639},"IKNwlfjMQXOfKhtUID30BQ","Singapore","singapore",{"__typename":624,"id":641,"name":642,"slug":643},"UzXo_gH5Te-UnOfNwdsfWQ","Netherlands","netherlands",{"__typename":624,"id":645,"name":646,"slug":647},"JKw7Q4wpQ8eGJjvHXwfSAA","Spain","spain",{"__typename":624,"id":649,"name":650,"slug":651},"RZbGpAInTEivnMxZzdTzwg","Poland","poland",{"__typename":624,"id":653,"name":654,"slug":655},"NwnHmUQ6RIK_OV9865XH3Q","Australia","australia",{"__typename":624,"id":657,"name":658,"slug":659},"HfVwBnHDSfCassEtkYx9lQ","United Kingdom","united-kingdom",{"__typename":624,"id":661,"name":662,"slug":663},"UUYGwDAYR4qLZM5UmDcmVA","USA","usa",[665,670],{"__typename":666,"id":667,"name":668,"slug":669},"PartnerCategoryRecord","dQoYak16SOaHi1odGdVqmQ","MSPs & SOCs","msps-socs",{"__typename":666,"id":671,"name":672,"slug":673},"REE7lMU8RzC9jabDARcxYQ","Resellers & Distributors","resellers-distributors",{"id":675,"_modelApiKey":676,"__typename":677,"text":678,"link":679,"menuLinks":687},"WnQYb8xeS2irpBJ41pdDRA","top_bar","TopBarRecord","Micropatches released for Windows Netlogon Remote Code Execution Vulnerability (CVE-2026-41089)",[680],{"externalLink":40,"id":681,"recordLink":682,"variant":12,"icon":685,"title":686},"K2tgUizORgyofhnuTJ36dA",{"__typename":683,"_modelApiKey":77,"slug":684},"ArticleRecord","micropatches-released-for-windows-netlogon-remote-code-execution-vulnerability-cv",false,"Learn more",[688,691],{"id":689,"primary":685,"externalLink":95,"parent":18,"reference":18,"title":690,"description":40,"publishTranslation":42},"B1pEweRaRD2YBkP6aH1CfA","Help center",{"id":692,"primary":42,"externalLink":693,"parent":18,"reference":18,"title":694,"description":40,"publishTranslation":42},"Mk0Yz-yqTk2akShgf7ARNg","https://central.0patch.com/","Sign in",[696,700],{"id":697,"title":698,"url":699},"NDrk5d4kQ96J2aCuTr-gvg","0patch on X","https://twitter.com/0patch",{"id":701,"title":702,"url":703},"GqN4lYxyTMyzcmRllVY4mg","Linked In","https://linkedin.com/company/0patch",{"left":705,"top":705,"width":706,"height":706,"rotate":705,"vFlip":685,"hFlip":685,"body":707},0,24,"\u003Cg fill=\"none\">\u003Cpath d=\"M11.9999 15.0539L6.34619 9.40013L7.39994 8.34637L11.9999 12.9464L16.5999 8.34637L17.6537 9.40013L11.9999 15.0539Z\" fill=\"currentColor\"/>\u003C/g>",{"left":705,"top":705,"width":706,"height":706,"rotate":705,"vFlip":685,"hFlip":685,"body":709},"\u003Cg fill=\"none\">\u003Cpath d=\"M9.5501 18.0001L3.8501 12.3001L5.2751 10.8751L9.5501 15.1501L18.7251 5.9751L20.1501 7.4001L9.5501 18.0001Z\" fill=\"currentColor\"/>\u003C/g>",{"left":705,"top":705,"width":706,"height":706,"rotate":705,"vFlip":685,"hFlip":685,"body":711},"\u003Cg fill=\"none\">\u003Cpath d=\"M5.55375 19.5001L4.5 18.4464L15.9462 7.00012H9V5.50012H18.5V15.0001H17V8.05387L5.55375 19.5001Z\" fill=\"currentColor\"/>\u003C/g>",{"article":713},{"_firstPublishedAt":714,"_publishedAt":715,"_updatedAt":716,"_seoMetaTags":717,"_allSlugLocales":783,"_allPublishTranslationLocales":786,"published":788,"__typename":683,"_modelApiKey":77,"author":789,"createdAt":714,"id":790,"excerpt":40,"body":791,"image":1177,"readTime":40,"title":720,"slug":785,"publishTranslation":42,"seoMetadata":18},"2025-08-21T14:24:42+02:00","2026-05-29T15:37:26+02:00","2026-05-29T15:37:23+02:00",[718,721,725,728,732,735,738,742,746,750,753,756,759,762,765,768,772,775,779],{"tag":719,"attributes":18,"content":720},"title","Did Microsoft Just Manually Patch Their Equation Editor Executable? Why Yes, Yes They Did. (CVE-2017-11882)",{"tag":722,"attributes":723,"content":18},"meta",{"property":724,"content":720},"og:title",{"tag":722,"attributes":726,"content":18},{"name":727,"content":720},"twitter:title",{"tag":722,"attributes":729,"content":18},{"name":730,"content":731},"description","This is a 0patch website.",{"tag":722,"attributes":733,"content":18},{"property":734,"content":731},"og:description",{"tag":722,"attributes":736,"content":18},{"name":737,"content":731},"twitter:description",{"tag":722,"attributes":739,"content":18},{"property":740,"content":741},"og:image","https://www.datocms-assets.com/166020/1755779075-equation_editor_properties.png?auto=format&fit=max&w=1200",{"tag":722,"attributes":743,"content":18},{"property":744,"content":745},"og:image:width","552",{"tag":722,"attributes":747,"content":18},{"property":748,"content":749},"og:image:height","628",{"tag":722,"attributes":751,"content":18},{"property":752,"content":720},"og:image:alt",{"tag":722,"attributes":754,"content":18},{"name":755,"content":741},"twitter:image",{"tag":722,"attributes":757,"content":18},{"name":758,"content":720},"twitter:image:alt",{"tag":722,"attributes":760,"content":18},{"property":761,"content":32},"og:locale",{"tag":722,"attributes":763,"content":18},{"property":764,"content":77},"og:type",{"tag":722,"attributes":766,"content":18},{"property":767,"content":6},"og:site_name",{"tag":722,"attributes":769,"content":18},{"property":770,"content":771},"article:modified_time","2026-05-29T13:37:23Z",{"tag":722,"attributes":773,"content":18},{"property":774,"content":40},"article:publisher",{"tag":722,"attributes":776,"content":18},{"name":777,"content":778},"twitter:card","summary",{"tag":722,"attributes":780,"content":18},{"name":781,"content":782},"robots","noindex",[784],{"value":785,"locale":32},"did-microsoft-just-manually-patch-their",[787],{"value":42,"locale":32},"2017-11-17T11:46:00+01:00","Mitja Kolsek","WR-9OFU-R6afjB6xP7jNOA",{"blocks":792,"links":925,"value":926},[793,808,822,835,849,861,875,887,898,912],{"id":794,"_modelApiKey":795,"__typename":796,"image":797},"Tha90-0YTXCOdUtCfgjSvg","image","ImageRecord",{"alt":720,"url":798,"width":799,"height":800,"responsiveImage":801},"https://www.datocms-assets.com/166020/1755779075-equation_editor_properties.png",552,628,{"srcSet":802,"webpSrcSet":803,"sizes":804,"src":798,"width":799,"height":800,"aspectRatio":805,"alt":720,"title":720,"bgColor":806,"base64":807},"https://www.datocms-assets.com/166020/1755779075-equation_editor_properties.png?dpr=0.25 138w,https://www.datocms-assets.com/166020/1755779075-equation_editor_properties.png?dpr=0.5 276w,https://www.datocms-assets.com/166020/1755779075-equation_editor_properties.png?dpr=0.75 414w,https://www.datocms-assets.com/166020/1755779075-equation_editor_properties.png 552w","https://www.datocms-assets.com/166020/1755779075-equation_editor_properties.png?dpr=0.25&fm=webp 138w,https://www.datocms-assets.com/166020/1755779075-equation_editor_properties.png?dpr=0.5&fm=webp 276w,https://www.datocms-assets.com/166020/1755779075-equation_editor_properties.png?dpr=0.75&fm=webp 414w,https://www.datocms-assets.com/166020/1755779075-equation_editor_properties.png?fm=webp 552w","(max-width: 552px) 100vw, 552px",0.8789808917197452,"#3399ff","data:image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wCEAAoHBwgHBhAIDQgRExQKDg4QDBUNFBUOFBENFx8ZGCIfFhUaKS0jJh0oHRUWJDUlKC0vMjIyGSI4PTcwPCsxMi8BCgsLDg4OFRAPHDsiHSUvLy81LzU7Oy8vLy8vLy8vLy8vLy87MjUvLy8vLy8vLy81Ly8vLy8vLy8vLy8vLy8vL//AABEIABgAFQMBIgACEQEDEQH/xAAaAAACAgMAAAAAAAAAAAAAAAAAAgQFAQMH/8QAHhAAAQQCAwEAAAAAAAAAAAAAAAECAwQhMQUSFRH/xAAWAQEBAQAAAAAAAAAAAAAAAAACAAH/xAAWEQEBAQAAAAAAAAAAAAAAAAAAEhH/2gAMAwEAAhEDEQA/AOkM4Wh82bI+GoquywjrQqwdlaJuUHY4g+HRAsVZGgAtuI8Vyukexk5CuuOxgCR0tQOz2AACn//Z",{"id":809,"_modelApiKey":795,"__typename":796,"image":810},"GvIVNfPhT8yJYgZjRNpKDw",{"alt":811,"url":812,"width":813,"height":814,"responsiveImage":815},"Equation_editor_timestamp.png","https://www.datocms-assets.com/166020/1757335258-equation_editor_timestamp.png",636,227,{"srcSet":816,"webpSrcSet":817,"sizes":818,"src":812,"width":813,"height":814,"aspectRatio":819,"alt":811,"title":811,"bgColor":820,"base64":821},"https://www.datocms-assets.com/166020/1757335258-equation_editor_timestamp.png?dpr=0.25 159w,https://www.datocms-assets.com/166020/1757335258-equation_editor_timestamp.png?dpr=0.5 318w,https://www.datocms-assets.com/166020/1757335258-equation_editor_timestamp.png?dpr=0.75 477w,https://www.datocms-assets.com/166020/1757335258-equation_editor_timestamp.png 636w","https://www.datocms-assets.com/166020/1757335258-equation_editor_timestamp.png?dpr=0.25&fm=webp 159w,https://www.datocms-assets.com/166020/1757335258-equation_editor_timestamp.png?dpr=0.5&fm=webp 318w,https://www.datocms-assets.com/166020/1757335258-equation_editor_timestamp.png?dpr=0.75&fm=webp 477w,https://www.datocms-assets.com/166020/1757335258-equation_editor_timestamp.png?fm=webp 636w","(max-width: 636px) 100vw, 636px",2.801762114537445,"#080eff","data:image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wCEAAoHBwsGCxIIBggGBgYIDg0ODggMBxENFgkYFxUZGBYTFhUaHysjGh0oHRUWJDUlKC0vMjIyGSI4PTcwPCsxMi8BCgsLDg0OGA0NHDscFhwvLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vL//AABEIAAkAGAMBIgACEQEDEQH/xAAXAAADAQAAAAAAAAAAAAAAAAAAAQcC/8QAFRABAQAAAAAAAAAAAAAAAAAAABH/xAAWAQEBAQAAAAAAAAAAAAAAAAABAgD/xAAXEQEBAQEAAAAAAAAAAAAAAAAAAREC/9oADAMBAAIRAxEAPwCsQ4DKL1WYDDHa/9k=",{"id":823,"_modelApiKey":795,"__typename":796,"image":824},"ctd-vIExTUyaufgQX31D2g",{"alt":825,"url":826,"width":827,"height":828,"responsiveImage":829},"equation_editor_diff_matched_functions.png","https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_matched_functions.png",657,495,{"srcSet":830,"webpSrcSet":831,"sizes":832,"src":826,"width":827,"height":828,"aspectRatio":833,"alt":825,"title":825,"bgColor":806,"base64":834},"https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_matched_functions.png?dpr=0.25 164w,https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_matched_functions.png?dpr=0.5 328w,https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_matched_functions.png?dpr=0.75 492w,https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_matched_functions.png 657w","https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_matched_functions.png?dpr=0.25&fm=webp 164w,https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_matched_functions.png?dpr=0.5&fm=webp 328w,https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_matched_functions.png?dpr=0.75&fm=webp 492w,https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_matched_functions.png?fm=webp 657w","(max-width: 657px) 100vw, 657px",1.3272727272727274,"data:image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wCEAAoHBwgHBhUSDQgQDQ0NDg0ODQYOCxENFhEYFx8ZGBYVFhUmHysjGh0oHRUWJTUlKC0vMjIyGSI4PTcwPCsxMi8BCgsLDg0PFQ0QHDscFhwvLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vL//AABEIABMAGAMBIgACEQEDEQH/xAAXAAEBAQEAAAAAAAAAAAAAAAAABAMG/8QAIBAAAgEEAQUAAAAAAAAAAAAAAAIBAxEVMTIEE0FCUf/EABgBAAIDAAAAAAAAAAAAAAAAAAAEAQMF/8QAGBEBAAMBAAAAAAAAAAAAAAAAAAIDEgH/2gAMAwEAAhEDEQA/AO+yddU0YZiv8D1lhOJP3Vj1M/VhDk5KMv1EeATzXW3EBqwbkqqrFtGErFtADi0hVtoAAh//2Q==",{"id":836,"_modelApiKey":795,"__typename":796,"image":837},"DCPxEZE3RS6gMfBUpn6VBQ",{"alt":838,"url":839,"width":840,"height":841,"responsiveImage":842},"equation_editor_diff_patched_function.png","https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_patched_function.png",1600,1143,{"srcSet":843,"webpSrcSet":844,"sizes":845,"src":839,"width":840,"height":841,"aspectRatio":846,"alt":838,"title":838,"bgColor":847,"base64":848},"https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_patched_function.png?dpr=0.25 400w,https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_patched_function.png?dpr=0.5 800w,https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_patched_function.png?dpr=0.75 1200w,https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_patched_function.png 1600w","https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_patched_function.png?dpr=0.25&fm=webp 400w,https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_patched_function.png?dpr=0.5&fm=webp 800w,https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_patched_function.png?dpr=0.75&fm=webp 1200w,https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_patched_function.png?fm=webp 1600w","(max-width: 1600px) 100vw, 1600px",1.3998250218722659,"#009de8","data:image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wCEAAoHBxEHBgoIDRENEhIPDhUKDg0NDxEVFg0NFxYZGBYVFiEaHysjGh0oHRUiJTUlKC0vMjIyGSI4PTcwPCsxMi8BCgsLDgsOHAoOFi8cHRw7NS81Ly8vLy8vLy8vLzAvNi8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vL//AABEIABIAGAMBIgACEQEDEQH/xAAZAAACAwEAAAAAAAAAAAAAAAAABAECBwP/xAAfEAABBAEFAQAAAAAAAAAAAAAAAQIEEgMRM2FxgTL/xAAVAQEBAAAAAAAAAAAAAAAAAAAAAf/EABURAQEAAAAAAAAAAAAAAAAAAAAB/9oADAMBAAIRAxEAPwDV5rtcrUGEfWP4Lym1zINVth04IheGtsjlJLxm1VyEiEUmfTBlm2nQAByxbigAEI//2Q==",{"id":850,"_modelApiKey":795,"__typename":796,"image":851},"IABggiNATB-oUmIuteK5kg",{"alt":852,"url":853,"width":840,"height":854,"responsiveImage":855},"patched_function_code_diff.png","https://www.datocms-assets.com/166020/1757335258-patched_function_code_diff.png",626,{"srcSet":856,"webpSrcSet":857,"sizes":845,"src":853,"width":840,"height":854,"aspectRatio":858,"alt":852,"title":852,"bgColor":859,"base64":860},"https://www.datocms-assets.com/166020/1757335258-patched_function_code_diff.png?dpr=0.25 400w,https://www.datocms-assets.com/166020/1757335258-patched_function_code_diff.png?dpr=0.5 800w,https://www.datocms-assets.com/166020/1757335258-patched_function_code_diff.png?dpr=0.75 1200w,https://www.datocms-assets.com/166020/1757335258-patched_function_code_diff.png 1600w","https://www.datocms-assets.com/166020/1757335258-patched_function_code_diff.png?dpr=0.25&fm=webp 400w,https://www.datocms-assets.com/166020/1757335258-patched_function_code_diff.png?dpr=0.5&fm=webp 800w,https://www.datocms-assets.com/166020/1757335258-patched_function_code_diff.png?dpr=0.75&fm=webp 1200w,https://www.datocms-assets.com/166020/1757335258-patched_function_code_diff.png?fm=webp 1600w",2.5559105431309903,"#0000ff","data:image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wCEAAoHBwgHBgoICAgFCgoFBQwFBQUFBREJCgUMFxMZGBYTFhUaHysjGh0oHRUWJDUlKC0vMjIyGSI4PTcwPCsxMi8BCgsLBQUFEAUFEC8cFhwvLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vL//AABEIAAoAGAMBIgACEQEDEQH/xAAVAAEBAAAAAAAAAAAAAAAAAAAAB//EABQQAQAAAAAAAAAAAAAAAAAAAAD/xAAVAQEBAAAAAAAAAAAAAAAAAAACAP/EABQRAQAAAAAAAAAAAAAAAAAAAAD/2gAMAwEAAhEDEQA/AK8AQgCT/9k=",{"id":862,"_modelApiKey":795,"__typename":796,"image":863},"acTibQB1SoGlJbF7UXzkMA",{"alt":864,"url":865,"width":866,"height":867,"responsiveImage":868},"equation_editor_diff_43b418.png","https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_43b418.png",1101,595,{"srcSet":869,"webpSrcSet":870,"sizes":871,"src":865,"width":866,"height":867,"aspectRatio":872,"alt":864,"title":864,"bgColor":873,"base64":874},"https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_43b418.png?dpr=0.25 275w,https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_43b418.png?dpr=0.5 550w,https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_43b418.png?dpr=0.75 825w,https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_43b418.png 1101w","https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_43b418.png?dpr=0.25&fm=webp 275w,https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_43b418.png?dpr=0.5&fm=webp 550w,https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_43b418.png?dpr=0.75&fm=webp 825w,https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_43b418.png?fm=webp 1101w","(max-width: 1101px) 100vw, 1101px",1.850420168067227,"#00a2e8","data:image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wCEAAoHBwgIDQYNCQ0NCgYNCg0KDg0LDhESDREYFxMZGBYVFhUaHysjGh0oHRUWJDUlKC0vMjIyGSI4PTcwPCsxMi8BCgsLDg4OEA0QHDsoFigvLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vL//AABEIAA0AGAMBIgACEQEDEQH/xAAWAAEBAQAAAAAAAAAAAAAAAAABAAf/xAAWEAEBAQAAAAAAAAAAAAAAAAAAEhH/xAAWAQADAAAAAAAAAAAAAAAAAAAAAQT/xAAXEQEAAwAAAAAAAAAAAAAAAAAAAhEi/9oADAMBAAIRAxEAPwDU5UjTqfQUA6iuQf/Z",{"id":876,"_modelApiKey":795,"__typename":796,"image":877},"HqGIvpBySJmHEk5qeO6AOA",{"alt":878,"url":879,"width":840,"height":880,"responsiveImage":881},"equation_editor_diff_4181fa.png","https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_4181fa.png",1253,{"srcSet":882,"webpSrcSet":883,"sizes":845,"src":879,"width":840,"height":880,"aspectRatio":884,"alt":878,"title":878,"bgColor":885,"base64":886},"https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_4181fa.png?dpr=0.25 400w,https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_4181fa.png?dpr=0.5 800w,https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_4181fa.png?dpr=0.75 1200w,https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_4181fa.png 1600w","https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_4181fa.png?dpr=0.25&fm=webp 400w,https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_4181fa.png?dpr=0.5&fm=webp 800w,https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_4181fa.png?dpr=0.75&fm=webp 1200w,https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_4181fa.png?fm=webp 1600w",1.2769353551476457,"#11a2e9","data:image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wCEAAoHBxANEg4HBw0PBgkIDRgQBwcHChEJDhENFxMZGBYTFhUaHysjGh0oHRUWJDUlKC0vMjIyGSI4PTcwPCsxMi8BCgsLDg0OFg0NHC8dFhwvLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vL//AABEIABMAGAMBIgACEQEDEQH/xAAXAAEAAwAAAAAAAAAAAAAAAAAAAQIH/8QAFRABAQAAAAAAAAAAAAAAAAAAABH/xAAXAQADAQAAAAAAAAAAAAAAAAAAAQMC/8QAFREBAQAAAAAAAAAAAAAAAAAAACL/2gAMAwEAAhEDEQA/ANfiIUrCNEChnSoBrgAD/9k=",{"id":888,"_modelApiKey":795,"__typename":796,"image":889},"DLH8KMrnTouYPTZharPeJg",{"alt":890,"url":891,"width":840,"height":892,"responsiveImage":893},"4181fa_code_diff.png","https://www.datocms-assets.com/166020/1757335258-4181fa_code_diff.png",312,{"srcSet":894,"webpSrcSet":895,"sizes":845,"src":891,"width":840,"height":892,"aspectRatio":896,"alt":890,"title":890,"bgColor":859,"base64":897},"https://www.datocms-assets.com/166020/1757335258-4181fa_code_diff.png?dpr=0.25 400w,https://www.datocms-assets.com/166020/1757335258-4181fa_code_diff.png?dpr=0.5 800w,https://www.datocms-assets.com/166020/1757335258-4181fa_code_diff.png?dpr=0.75 1200w,https://www.datocms-assets.com/166020/1757335258-4181fa_code_diff.png 1600w","https://www.datocms-assets.com/166020/1757335258-4181fa_code_diff.png?dpr=0.25&fm=webp 400w,https://www.datocms-assets.com/166020/1757335258-4181fa_code_diff.png?dpr=0.5&fm=webp 800w,https://www.datocms-assets.com/166020/1757335258-4181fa_code_diff.png?dpr=0.75&fm=webp 1200w,https://www.datocms-assets.com/166020/1757335258-4181fa_code_diff.png?fm=webp 1600w",5.128205128205129,"data:image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wCEAAoHBwgHBgoICAgFCgoFBQwFBQUFBREJCgUMFxMZGBYTFhUaHysjGh0oHRUWJDUlKC0vMjIyGSI4PTcwPCsxMi8BCgsLBQUFEAUFEC8cFhwvLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vL//AABEIAAUAGAMBIgACEQEDEQH/xAAVAAEBAAAAAAAAAAAAAAAAAAAAB//EABQQAQAAAAAAAAAAAAAAAAAAAAD/xAAVAQEBAAAAAAAAAAAAAAAAAAACAP/EABQRAQAAAAAAAAAAAAAAAAAAAAD/2gAMAwEAAhEDEQA/AK8AQgCT/9k=",{"id":899,"_modelApiKey":795,"__typename":796,"image":900},"Od9tSWUdRDa4mWOAOkgvAg",{"alt":901,"url":902,"width":903,"height":904,"responsiveImage":905},"equation_editor_diff_41160f.png","https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_41160f.png",911,877,{"srcSet":906,"webpSrcSet":907,"sizes":908,"src":902,"width":903,"height":904,"aspectRatio":909,"alt":901,"title":901,"bgColor":910,"base64":911},"https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_41160f.png?dpr=0.25 227w,https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_41160f.png?dpr=0.5 455w,https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_41160f.png?dpr=0.75 683w,https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_41160f.png 911w","https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_41160f.png?dpr=0.25&fm=webp 227w,https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_41160f.png?dpr=0.5&fm=webp 455w,https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_41160f.png?dpr=0.75&fm=webp 683w,https://www.datocms-assets.com/166020/1757335258-equation_editor_diff_41160f.png?fm=webp 911w","(max-width: 911px) 100vw, 911px",1.0387685290763968,"#00a9f1","data:image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wCEAAoHBwgHCAgHCAcHBwcNBxgHBwcHDhEJCwkYFxUZGBYTIiEaHysjGh0oHRUWJDUlKC0vMjIyGSI4PTcwPCsxMi8BCgsLDg0PEBANFS8dFhwvLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vL//AABEIABgAGAMBIgACEQEDEQH/xAAXAAEBAQEAAAAAAAAAAAAAAAABAAIH/8QAFhABAQEAAAAAAAAAAAAAAAAAABEB/8QAFwEBAAMAAAAAAAAAAAAAAAAAAgABA//EABcRAQADAAAAAAAAAAAAAAAAAAABAhL/2gAMAwEAAhEDEQA/AOtiiis4qTVTNB5QjUihQSRo/9k=",{"id":913,"_modelApiKey":795,"__typename":796,"image":914},"fh-AhpW2TACzSa39HbtsRA",{"alt":915,"url":916,"width":917,"height":918,"responsiveImage":919},"aslr.png","https://www.datocms-assets.com/166020/1757335258-aslr.png",1012,500,{"srcSet":920,"webpSrcSet":921,"sizes":922,"src":916,"width":917,"height":918,"aspectRatio":923,"alt":915,"title":915,"bgColor":806,"base64":924},"https://www.datocms-assets.com/166020/1757335258-aslr.png?dpr=0.25 253w,https://www.datocms-assets.com/166020/1757335258-aslr.png?dpr=0.5 506w,https://www.datocms-assets.com/166020/1757335258-aslr.png?dpr=0.75 759w,https://www.datocms-assets.com/166020/1757335258-aslr.png 1012w","https://www.datocms-assets.com/166020/1757335258-aslr.png?dpr=0.25&fm=webp 253w,https://www.datocms-assets.com/166020/1757335258-aslr.png?dpr=0.5&fm=webp 506w,https://www.datocms-assets.com/166020/1757335258-aslr.png?dpr=0.75&fm=webp 759w,https://www.datocms-assets.com/166020/1757335258-aslr.png?fm=webp 1012w","(max-width: 1012px) 100vw, 1012px",2.024,"data:image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wCEAAoHBwgHBgoIDQgQDQoWFRYQDQ0NFxENEhENFxUZGBYTIiEaHysjGh0oHRUWJDUlKC0vMjIyGSI4PTcwPCsxMi8BCgsLDg0OFQ0MHC8cFhwvLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vL//AABEIAAwAGAMBIgACEQEDEQH/xAAYAAACAwAAAAAAAAAAAAAAAAAAAgEDB//EAB4QAAEEAQUAAAAAAAAAAAAAAAABAgMxEgUTFTNB/8QAFQEBAQAAAAAAAAAAAAAAAAAAAQD/xAAXEQADAQAAAAAAAAAAAAAAAAAAARIC/9oADAMBAAIRAxEAPwDTuLg27Jh02BUstb0ixqqeitMJQ8mlwYWAznuwsCpjKP/Z",[],{"schema":927,"document":928},"dast",{"type":929,"children":930},"root",[931,981,983,1009,1010,1029,1030,1053,1054,1058,1059,1063,1075,1076,1080,1081,1085,1089,1090,1094,1106,1107,1129,1130,1134,1174],{"type":932,"children":933},"paragraph",[934,939,941,950,952,955,957,964,966,973,975,979],{"type":935,"marks":936,"value":938},"span",[937],"strong","And They Did an Absolutely Stellar Job",{"type":935,"value":940},"\n\n[Update 11/21/2017]  Today Embedi published ",{"url":942,"meta":943,"type":12,"children":947},"https://github.com/embedi/CVE-2017-11882",[944],{"id":945,"value":946},"target","_blank",[948],{"type":935,"value":949},"their proof-of-concept exploit",{"type":935,"value":951},", which allowed us to see where exactly Microsoft's manual patch blocks it. Contrary to this article's original claim that CVE-2017-11882 was patched in function 4164FA while six other buffer overflow checks we found were for some other attack vectors, it is actually one of those six checks that blocks Embedi's exploit. This article has been slightly corrected to reflect that. In addition, we were now able to create a micropatch for Equation Editor that also blocks all exploits targeting the vulnerability found by Embedi. All Internet-connected computers with a registered 0patch Agent running have already received this micropatch and have it automatically applied whenever Equation Editor is launched. [End update 11/21/2017]\n\n\n",{"type":935,"marks":953,"value":954},[937],"A Pretty Old Executable",{"type":935,"value":956},"\n\nThe recent Patch Tuesday brought, among other things, a new version of \"old\" Equation Editor, which introduced a ",{"url":958,"meta":959,"type":12,"children":961},"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882",[960],{"id":945,"value":946},[962],{"type":935,"value":963},"fix for a buffer overflow issue",{"type":935,"value":965}," reported by ",{"url":967,"meta":968,"type":12,"children":970},"https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about",[969],{"id":945,"value":946},[971],{"type":935,"value":972},"Embedi",{"type":935,"value":974},".\n\nThe \"old\" Equation Editor is an ",{"type":935,"marks":976,"value":978},[977],"emphasis","ancient ",{"type":935,"value":980},"component of Microsoft Office (Office now uses an integrated Equation Editor), which is confirmed by looking at the properties of the unpatched EQNEDT32.EXE:\n\n",{"item":794,"type":982},"block",{"type":932,"children":984},[985,987,990,992,995,997,1007],{"type":935,"value":986},"We can see that ",{"type":935,"marks":988,"value":989},[977],"File version ",{"type":935,"value":991},"is 2000.11.9.0 (implying being built in 2000), while ",{"type":935,"marks":993,"value":994},[977],"Date modified",{"type":935,"value":996}," is in 2003, which matches the time of its signature (signing modifies the file as the signature is attached to it.) Furthermore, the ",{"url":998,"meta":999,"type":12,"children":1001},"https://msdn.microsoft.com/en-us/library/windows/desktop/ms680547(v=vs.85).aspx",[1000],{"id":945,"value":946},[1002,1005],{"type":935,"marks":1003,"value":1004},[977],"TimeDateStamp",{"type":935,"value":1006}," in its PE header",{"type":935,"value":1008}," (3A0ACEBF), which the compiler writes into the executable module when building it, indicates that the file was built on November 9, 2000 - exactly matching the date in the above version number.\n\n",{"item":809,"type":982},{"type":932,"children":1011},[1012,1014,1017,1019,1022,1024,1027],{"type":935,"value":1013},"\nWe're therefore safe to claim that the vulnerable EQNEDT32.EXE has been with us since 2000. That's 17 years, which is a pretty respectable life span for software!\n\nSo now a vulnerability was reported in this executable and Microsoft spawned their fixing procedure: they reproduced the issue using Embedi's proof-of-concept, confirmed it, took the source code, fixed the issue in the source code, re-built EQNEDT32.EXE, and distributed the fixed version to Office users, who now see version 2017.8.14.0 under its properties.\n\nAt least that's how it ",{"type":935,"marks":1015,"value":1016},[977],"would ",{"type":935,"value":1018},"work for most other vulnerabilities. But something was different here. For some reason, Microsoft didn't fix this issue in the source code - but rather by manually patching the binary executable.\n\n\n",{"type":935,"marks":1020,"value":1021},[937],"Manually Patching an EXE?",{"type":935,"value":1023},"\n\nReally, quite literally, some pretty skilled Microsoft employee or contractor reverse engineered our friend EQNEDT32.EXE, located the flawed code, and corrected it by manually overwriting existing instructions with better ones (making sure to only use the space previously occupied by original instructions).\n\nHow do we know that? Well, have you ever met a C/C++ compiler that would put all functions in a 500+ KB executable on ",{"type":935,"marks":1025,"value":1026},[937],"exactly the same address in the module",{"type":935,"value":1028}," after rebuilding a modified source code, especially when these modifications changed the amount of code in several functions?\n\nTo clarify, let's look at BinDiff results between the fixed (2017.8.14.0, \"primary\") and vulnerable version (2000.11.9.0, \"secondary\") of EQNEDT32.EXE:\n\n",{"item":823,"type":982},{"type":932,"children":1031},[1032,1034,1037,1039,1042,1044,1051],{"type":935,"value":1033},"\n\nIf you're diffing binaries a lot, you'll notice something highly peculiar: All ",{"type":935,"marks":1035,"value":1036},[977],"EA primary",{"type":935,"value":1038}," values are identical to ",{"type":935,"marks":1040,"value":1041},[977],"EA secondary",{"type":935,"value":1043}," values of matched functions. Even the matched but obviously different functions listed at the bottom are at the same address in both EQNEDT32.EXE versions.\n\nAs we already ",{"url":1045,"meta":1046,"type":12,"children":1048},"https://twitter.com/0patch/status/930803478930345984",[1047],{"id":945,"value":946},[1049],{"type":935,"value":1050},"noted on Twitter",{"type":935,"value":1052},", Microsoft modified five functions in EQNEDT32.EXE, namely the bottom-most five functions listed on the above image. Let's look at the most-modified one first, the one at address 4164FA. The patched version is on the left, the vulnerable one on the right.\n\n",{"item":836,"type":982},{"type":932,"children":1055},[1056],{"type":935,"value":1057},"\n\nThis function takes a pointer to the destination buffer and copies characters, one by one in a loop, from user-supplied string to this buffer. It is also the very function that Embedi found to be vulnerable in their research; namely, there was no check whether the destination buffer was large enough for the user-supplied string, and a too-long font name provided through the Equation object could cause a buffer overflow.\n\nMicrosoft's fix introduced an additional parameter to this function, specifying the destination buffer length. The original logic of the character-copying loop was then modified so that the loop ends not only when the source string end is reached, but also when the destination buffer length is reached - preventing buffer overflow. In addition, the copied string in the destination buffer is zero-terminated after copying, in case the destination buffer length was reached (which would leave the string unterminated).\n\nLet's look at the code in its text form (again, patched function on left, vulnerable on right):",{"item":850,"type":982},{"type":932,"children":1060},[1061],{"type":935,"value":1062},"\n\nAs you can see, whoever patched this function not only added a check for buffer length in it, but also managed to make the function 14 bytes shorter (and padded the resulting gap before the adjacent function with 0xCC bytes for style points :). Impressive.\n\n\n",{"type":932,"children":1064},[1065,1068,1070,1073],{"type":935,"marks":1066,"value":1067},[937],"Patching The Callers",{"type":935,"value":1069},"\n\nMoving on. If the patched function got an additional parameter, all those calling it would have to change as well, right? There are exactly two callers of this function, at addresses 43B418 and 4181FA, and in the patched version they both have a push instruction added before the call to specify the length of their buffers, 0x100 and 0x1F4 respectively.\n\nNow, a push instruction with a 32-bit literal operand takes 5 bytes. In order to add this instruction to these two functions while staying within the tight space of the original code (whose logic must also remain intact), the",{"type":935,"marks":1071,"value":1072},[977]," ",{"type":935,"value":1074},"patcher did the following:\n\nFor function at address 43B418, the patched function temporarily stores some value - which it will need later on - in ebx instead of a local stack-based variable, which releases enough bytes for injecting the push call. (By the way, additional evidence of manual patching is that while the local variable is no longer used, space for it is still made on the stack; otherwise sub esp, 0x10C would turn into sub esp, 0x108.)\n\n\n",{"item":862,"type":982},{"type":932,"children":1077},[1078],{"type":935,"value":1079},"\n\n\nFor the other caller, function at address 4181FA, the patched function mysteriously has the push instruction injected without any other modifications to the code that would introduce the needed extra space.\n",{"item":876,"type":982},{"type":932,"children":1082},[1083],{"type":935,"value":1084},"\n\nAs you can see on the above image, the push instruction is injected at the beginning of the yellow block, and all original instructions in that block are pushed down 5 bytes. But why does this not overwrite 5 bytes of the original code somewhere else? It's as if there were 5 or more unused bytes already in existence just after this block of code that the patcher could safely overwrite.\n\nTo solve this mystery, let's look at the code in its text form.",{"type":932,"children":1086},[1087],{"type":935,"value":1088},"\n",{"item":888,"type":982},{"type":932,"children":1091},[1092],{"type":935,"value":1093},"\n\nSurprise, the vulnerable version actually had an extra jmp loc_418318 instruction at the end of the modified code block. How convenient! This allows the code in this block to be moved down 5 bytes, making space for the push instruction at the top.\n\nCoincidence? Perhaps, but it looks an awful lot like this code block got manually modified before in the past, whereby it got shortened for 5 bytes and its last instruction (jmp loc_418318) was left there.\n\n\n",{"type":932,"children":1095},[1096,1099,1101,1104],{"type":935,"marks":1097,"value":1098},[937],"Additional Security Checks",{"type":935,"value":1100},"\n\nWhat we've covered so far was related to Embedi's published research and CVE-2017-11882, but is ",{"type":935,"marks":1102,"value":1103},[977],"not",{"type":935,"value":1105}," what blocks Embedi's exploit. The new version of EQNEDT32.EXE has two additional modified functions at addresses 41160F and 4219F0. Let's have a look at them.\n\nIn the patched executable, these two functions got a bunch of injected boundary checks for copying to what appear to be 0x20-byte buffers. These checks all look the same: ecx (which is the counter for copying) is compared to 0x21; if it's greater than or equal to that, ecx gets set to 0x20. All these checks are injected right before inlined memcpy operations. Let's look at one of them to see how the patcher made room for the additional instructions.\n\n",{"item":899,"type":982},{"type":932,"children":1108},[1109,1111,1114,1116,1118,1120,1127],{"type":935,"value":1110},"\n\nAs shown on the above image, a check is injected before the inlined memcpy code. Note that in 32-bit code, memcpy is typically implemented by first copying blocks of 4 bytes using the movsd (move double word) instruction, while any remaining bytes are then copied using movsb (move byte). This is efficient in terms of performance, but whoever was patching this noticed that some space can be freed by only using movsb, and perhaps sacrificing a nanosecond or two. After doing so, the code remained logically identical but now there was space for injecting the check before it, as well as for zero-terminating the copied string. Again, an impressive and clever hack (and there was still an extra byte to spare - notice the nop?)\n\nThere are six such length checks in two modified functions, and just one of them is directly responsible for blocking Embedi's exploit. We believe that Microsoft noticed some additional attack vectors that could also cause a buffer overflow and decided to proactively patch the other five memcpys and the patched function we covered earlier.\n\n\n",{"type":935,"marks":1112,"value":1113},[937],"Final Touches",{"type":935,"value":1115},"\n\nAfter patching the vulnerable code and effectively manually building a new version of Equation Editor, the patcher also corrected the version number of EQNEDT32.EXE to 2017.8.14.0, and the ",{"type":935,"marks":1117,"value":1004},[977],{"type":935,"value":1119}," in the PE header to August 14, 2017 (hex value 5991FA38) - which is just 10 days after Microsoft acknowledged receipt of Embedi's report. (Note however that due to the manual nature of setting these values it's possible that code has been modified after that date.)\n\n[Update 11/20/2017] Another thing Microsoft also patched in EQNEDT32.EXE was the \"ASLR bit\", i.e., they set the IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE flag in the ",{"url":1121,"meta":1122,"type":12,"children":1124},"https://msdn.microsoft.com/en-us/library/windows/desktop/ms680339(v=vs.85).aspx",[1123],{"id":945,"value":946},[1125],{"type":935,"value":1126},"PE optional header structure",{"type":935,"value":1128},":\n\n\n\n",{"item":913,"type":982},{"type":932,"children":1131},[1132],{"type":935,"value":1133},"\n\n\n\nThis is good. Enabling ASLR on EQNEDT32.EXE will make it harder to exploit any remaining memory corruption vulnerabilities. For instance, Embedi's exploit would not work with ASLR because it relied on the fact that the call to WinExec would always be present at the same memory address; this allowed them to simply put that address on stack and wait for the ret to do all the work.\n\nInterestingly, Microsoft decided not to also set the IMAGE_DLLCHARACTERISTICS_NX_COMPAT (\"DEP\") flag, which would prevent code execution from data pages (e.g., from stack). They surely had good reasons, but should any additional vulnerabilities be found and exploited in EQNEDT32.EXE, the exploit will likely include execution of data on stack or heap. [End update 11/20/2017]\n\n\n",{"type":932,"children":1135},[1136,1139,1141,1148,1150,1156,1158,1165,1166,1172],{"type":935,"marks":1137,"value":1138},[937],"Conclusion",{"type":935,"value":1140},"  \n\nMaintaining a software product in its binary form instead of rebuilding it from modified source code is hard. We can only speculate as to why Microsoft used the binary patching approach, but being binary patchers ourselves we think they did a stellar job.\n\nThis old Equation Editor is now under the spotlight, and many researchers are likely to start fuzzing it for additional vulnerabilities. If any are found, we'll probably see additional rounds of manual binary patches in EQNEDT32.EXE. While Office has had a new Equation Editor integrated since at least version 2007, Microsoft can't simply remove EQNEDT32.EXE (the old Equation Editor) from Office as there are probably tons of old documents out there containing equations in this old format, which would then become un-editable.\n\nNow how would we micropatch CVE-2017-11882 with 0patch? It would actually be much easier: we wouldn't have to shrink existing code to make room for the injected one, because 0patch makes sure that we get all the space we need. So we wouldn't have to come up with clever hacks like de-optimizing memcpy or finding an alternative place to temporarily store a value for later use. This freedom and flexibility makes developing an in-memory micropatch much easier and quicker than in-file patching, and we believe software vendors like Microsoft could benefit greatly from using in-memory micropatching for fixing critical vulnerabilities.\n\nOh by the way, Microsoft also updated Office's wwlib.dll this Patch Tuesday, prompting us to port our ",{"url":1142,"meta":1143,"type":12,"children":1145},"https://blog.0patch.com/2017/10/0patching-office-dde-ddeauto.html",[1144],{"id":945,"value":946},[1146],{"type":935,"value":1147},"DDE / DDEAUTO patches",{"type":935,"value":1149}," to these new versions. 0patch Agent running on your computer will automatically download and apply these new patches without interrupting you. If you don't have 0patch Agent installed yet, we have good news for you: IT'S FREE! Just ",{"url":55,"meta":1151,"type":12,"children":1153},[1152],{"id":945,"value":946},[1154],{"type":935,"value":1155},"download",{"type":935,"value":1157},", install and register, and you're all set. \n\n\nCheers!\n\n",{"url":1159,"meta":1160,"type":12,"children":1162},"https://twitter.com/mkolsek",[1161],{"id":945,"value":946},[1163],{"type":935,"value":1164},"@mkolsek",{"type":935,"value":1088},{"url":699,"meta":1167,"type":12,"children":1169},[1168],{"id":945,"value":946},[1170],{"type":935,"value":1171},"@0patch",{"type":935,"value":1173},"\n\nP.S.: If you happen to know the person(s) who did the binary patching of EQNEDT32.EXE, please send them a link to this blog post. We'd like them to know how much we admire their work. Thanks! \n\n\n",{"type":932,"children":1175},[1176],{"type":935,"value":40},{"alt":720,"url":798,"width":799,"height":800,"responsiveImage":1178},{"srcSet":1179,"webpSrcSet":1180,"sizes":1181,"src":1182,"width":1183,"height":1184,"aspectRatio":1185,"alt":720,"title":720,"bgColor":806,"base64":1186},"https://www.datocms-assets.com/166020/1755779075-equation_editor_properties.png?auto=compress&crop=focalpoint&dpr=0.25&fit=crop&w=1440 360w,https://www.datocms-assets.com/166020/1755779075-equation_editor_properties.png?auto=compress&crop=focalpoint&fit=crop&w=1440 1440w","https://www.datocms-assets.com/166020/1755779075-equation_editor_properties.png?auto=compress&crop=focalpoint&dpr=0.25&fit=crop&fm=webp&w=1440 360w,https://www.datocms-assets.com/166020/1755779075-equation_editor_properties.png?auto=compress&crop=focalpoint&fit=crop&fm=webp&w=1440 1440w","(max-width: 1440px) 100vw, 1440px","https://www.datocms-assets.com/166020/1755779075-equation_editor_properties.png?auto=compress&crop=focalpoint&fit=crop&w=1440",1440,1638,0.8791208791208791,"data:image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wCEAAoHBwgHBg0RCwgTEhUPDQ0OFBEPFBUOFhENFx8ZGBYVFhUaKSsjJh0oKRUWJDUlKC0vMjIyGSI4PTcwPCsxMi8BCgsLDg4OFBAQHDsiHSUvLy8vLy87Oy8vLy8vLy8vLy8vLy87LzUvLy8vLy8vLy81Ly8vLy8vLy8vLy8vLy8vL//AABEIABgAFQMBIgACEQEDEQH/xAAZAAACAwEAAAAAAAAAAAAAAAAAAgQFBwH/xAAdEAABBAMBAQAAAAAAAAAAAAAAAQIDBAUxQhUR/8QAFgEBAQEAAAAAAAAAAAAAAAAAAgAB/8QAFhEBAQEAAAAAAAAAAAAAAAAAABIR/9oADAMBAAIRAxEAPwDSWYah82PHhqKqWEdaFWDsrRN0OxxB8OiBYqyNABbcR4rldI9jJkK69HAJHS1A7oAAKf/Z",1780067937176]