Microsoft Says Security Windows Bug Is Patched in Non-Security Windows Update

A security bug that Microsoft has recently acknowledged can be resolved by simply installing the latest Windows 10 non-security updates.

If this sounds awkward, it’s because it is, especially because Microsoft more or less confirms that the latest non-security cumulative updates for Windows 10 and Windows Servers also include security-related improvements.

First and foremost, an advisory published by Microsoft earlier this week reveals that a bug in Windows 10 and Windows Server can lead to a spike in CPU usage.

“Microsoft is aware of a potential condition which can be triggered when malicious HTTP/2 requests are sent to a Windows Server running Internet Information Services (IIS). This could temporarily cause the system CPU usage to spike to 100% until the malicious connections are killed by IIS,” the company says.

Windows 10 version 1803 and older and Windows Server 2016 ...