Microsoft schedules seven security patches for monthly Patch Tuesday

Share this article:

Microsoft next week expects to release seven patches to cover vulnerabilities across its product line.

According to the software giant's advance notification announced Thursday, four of the bulletins are rated "critical," while three earned "important" designations. They address flaws in Internet Explorer (IE), Windows, Office, Server Software and Silverlight.

The high-priority fix appears to be a cumulative patch that will correct flaws across all supported versions of IE. Attackers can exploit these weaknesses to launch drive-by download attacks against users who unknowingly visit an infected website.

"Microsoft patched IE every month since November 2012, so it shouldn't surprise anyone that they're going to patch it again this month," said Andrew Storms, director of security operations for vulnerability and risk management provider nCircle. "Microsoft is clearly delivering on their commitment to release more frequent IE patches. They're never going to get the IE bug backlog down to zero, but you have to admire their determination to try."

Another of the pressing critical patches addresses vulnerabilities in Silverlight, an application development suite, that "is widely installed at least on end-user workstations to run media applications, for example Netflix," said Wolfgang Kandez, CTO of cloud security company Qualys.

The patches are scheduled to be released about 1 p.m. on Tuesday.

Share this article:
You must be a registered member of SC Magazine to post a comment.

Sign up to our newsletters

TOP COMMENTS

More in News

Adobe exploit used to spread Dyre credential stealer

Adobe exploit used to spread Dyre credential stealer

Users running vulnerable Adobe software could be in danger of having credentials for Bitcoin websites stolen.

Staples is investigating a potential issue involving credit card data

Staples is investigating a potential issue involving credit ...

The company said it is investigating a potential issue involving credit card data and that customers are not responsible for fraudulent activity on cards if an issue is discovered.

Skills set a priority over legacy prejudices, experts say

Skills set a priority over legacy prejudices, experts ...

Cybersecurity expert Winn Schwartau and Robert Clark, a cyber law attorney at the Army Cyber Institute, discussed issues around hiring in the information security industry.