3 ms·

Microsoft: Anyone who deleted mysterious folder after update must put it back

• cratermoon 2y ago
  "the folder is created as part of a security fix" Just like removing the ability to install Windows 11 without a Microsoft account is "security", right?
• deleted 2y ago
  [deleted]
• LegionMammal978 2y ago
  The actual information comes from Microsoft's CVE listing [0]. Allegedly it's to prevent a privilege escalation to SYSTEM via the Windows Update stack. (From attackers who can already add subdirectories to the system drive, I guess. Though I wonder why Windows Update would even be writing stuff into the inetpub directory in the first place.) [0] https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21204 https://msrc.microsoft.com/update-guide/vulnerability/CVE-20...
  • mindcrash 2y ago
    Might have something to do with legacy WSUS code still being part of the stack, which relies on IIS.
• jerhewet 2y ago
  The stupid, it burns.
  • karmakaze 2y ago
    The fix if you already deleted the folder? Install IIS: Dumb and Dumberer.