As part of this month’s Patch Tuesday schedule, Microsoft plans to ship a dozen bulletins with fixes for 22 vulnerabilities, some serious enough to allow hackers complete access to a vulnerable Windows machine.
According to Microsoft’s advance notice, three of the 12 bulletins will carry be rated “critical,” the company’s highest severity rating.
This month’s patch batch will apply to the Microsoft Windows operating system, the Internet Explorer browser, the Microsoft Office productivity suite, Visual Studio, and IIS.
As part of this month’s update, we’ll be addressing issues related to two recent Security Advisories, 2490606 (a public vulnerability affecting the Windows Graphics Rendering Engine) and 2488013 (a public vulnerability affecting Internet Explorer). Additionally, we will be addressing an issue affecting FTP service in IIS 7.0 and 7.5.
However, it is important to note that the recently disclosed cross-site scripting vulnerability in MHTML will not be fixed this month.
Last week, Microsoft shipped an
advisory to warn of the availability of exploit code for a serious vulnerability in all supported editions of Microsoft Windows.