Microsoft has seen a lot of issues lately, and now a seemingly simple patch is causing serious problems for certain laptops running the 201
Microsoft has addressed the issue that has been fixed:
A security vulnerability exists that could cause code execution of objects in memory on the Internet by the scripting engine. The vulnerability could corrupt memory so that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker can then install programs. Display, change or delete data; or create new accounts with full user rights.
In a Web-based attack scenario, an attacker could host a specially crafted Web site that exploits the vulnerability in Internet Explorer, and then convince a user to view the Web site by sending an e-mail.
The security update addresses the vulnerability by modifying how the Script Engine processes objects in memory.
Now, however, this update causes a fairly big problem: it prevents certain laptops from starting. The affected machines are part of a rather small group – only Lenovo laptops with less than 8 GB of RAM running the 2016 Anniversary Update (1607) – but it's still a pretty bad problem. Fortunately, there is a way to handle the failed boot by rebooting the UEFI and disabling Secure Boot. If BitLocker is enabled, you may need to go through BitLocker recovery after turning off Secure Boot.
On the upside, Microsoft is working with Lenovo to fix the problem, and will eventually release a fix in the future. I just would not count on it before the end of the year. Be careful when updating devices, especially if they are Lenovo limited-memory laptops.