Microsoft set to deliver 11 patches next week

Share this article:
Microsoft said Thursday it plans to release 11 patches next week, including four to address "critical" vulnerabilities that could be remotely exploited to execute malicious code.

The critical fixes address flaws in Windows, Internet Explorer, Host Integration Server and Excel, according to Microsoft's advance notification document.

Six bulletins are labeled "important" and affect issues in Windows. Microsoft also has scheduled one "moderate" patch to fix bugs in Office.

The security update matches the number of fixes in August. September saw only four patches.

Along with the patches, next week Microsoft plans to release its monthly updated version of the Windows Malicious Software Removal Tool.

This month also marks the unveiling of two initiatives aimed at helping end-users patch more effectively: the Microsoft Active Protections Program (MAPP) and the Exploitability Index.

Under the former, Microsoft will share vulnerability details with approved software security providers prior to the monthly fixes being released. This will allow security firms to immediately protect their customers once the patches are delivered.

The Exploitability Index tool will be included with security updates to enable users to measure the likelihood of the flaw in question being exploited. Each vulnerability will be placed into one of the three categories, depending on whether "consistent" exploit code is likely, whether "inconsistent" exploit code is likely or whether exploit code is unlikely.
Share this article:

Sign up to our newsletters

More in News

Pentagon to triple its security workforce by 2016

Pentagon to triple its security workforce by 2016

Defense Secretary Chuck Hagel recently announced the recruitment efforts during a speech in Fort Meade, Md.

Tech manufacturer's online payment system breached

LaCie confirmed an unauthorized party used malware to access its online payment system for almost a year and could have stolen customer information.

The Heartbleed bug works, and could be a scapegoat for older breaches

The Heartbleed bug works, and could be a ...

Researchers proved the Heartbleed bug was real in a challenge issued by CloudFlare to prove private keys can be stolen, right around the time companies are claiming they were breached ...