Microsoft set to deliver 11 patches next week

Share this article:
Microsoft said Thursday it plans to release 11 patches next week, including four to address "critical" vulnerabilities that could be remotely exploited to execute malicious code.

The critical fixes address flaws in Windows, Internet Explorer, Host Integration Server and Excel, according to Microsoft's advance notification document.

Six bulletins are labeled "important" and affect issues in Windows. Microsoft also has scheduled one "moderate" patch to fix bugs in Office.

The security update matches the number of fixes in August. September saw only four patches.

Along with the patches, next week Microsoft plans to release its monthly updated version of the Windows Malicious Software Removal Tool.

This month also marks the unveiling of two initiatives aimed at helping end-users patch more effectively: the Microsoft Active Protections Program (MAPP) and the Exploitability Index.

Under the former, Microsoft will share vulnerability details with approved software security providers prior to the monthly fixes being released. This will allow security firms to immediately protect their customers once the patches are delivered.

The Exploitability Index tool will be included with security updates to enable users to measure the likelihood of the flaw in question being exploited. Each vulnerability will be placed into one of the three categories, depending on whether "consistent" exploit code is likely, whether "inconsistent" exploit code is likely or whether exploit code is unlikely.
Share this article:

Sign up to our newsletters

More in News

AOL Mail hack furthers spam campaign using spoofed accounts

AOL confirmed on Monday that it was aware of the issue and working to remediate the situation.

Backdoors in Wi-Fi routers, said to be closed, can be reopened

Backdoors in Wi-Fi routers, said to be closed, ...

Although said to be patched, researcher Eloi Vanderbeken discovered during the Easter holiday that backdoors existing in certain wireless routers can be reactivated.

Apple ships Mac OS X updates, fixes several code execution bugs

Apple ships Mac OS X updates, fixes several ...

Among the addressed vulnerabilities, was a bug affecting WindowServer, which could allow an attacker to execute malicious code outside the sandbox.