微软最近也遇到了一些问题，现在一个看似简单的补丁程序正在给某些运行2016周年更新的笔记本电脑带来严重问题。这个更新最初是为了防止IE受到零日攻击而发布的。

根据Microsoft，这是正在修复的问题：

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website, for example, by sending an email.

The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.

但现在这个修复程序本身也造成了一个相当大的问题：它阻止了某些笔记本电脑的启动。受影响的机器只是一小部分运行2016周年更新（1607）的内存不足8GB的联想笔记本电脑的一部分，但这仍然是一个相当糟糕的问题。

幸运的是，有一种方法可以绕过失败的引导，重新启动到UEFI并禁用安全引导。还需要注意的是，如果启用了BitLocker，则在禁用安全引导后，您可能需要执行BitLocker恢复。

从好的方面来看，微软正与联想合作解决这个问题，并将在未来某个时候发布一个修复程序。我只是不指望在年底之前。在此之前，在更新设备时要小心，尤其是那些内存有限的联想笔记本电脑。

通过MSPowerUser