Microsoft Schedules 8 Patches For Tuesday - InformationWeek

InformationWeek is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

IoT
IoT
News

Microsoft Schedules 8 Patches For Tuesday

Microsoft will release eight patches for Windows, Office, Exchange, and MSN Messenger, at least half of which will be marked "critical," the company said late Thursday.

Tuesday, April 12, will be a busy day at Microsoft.

The Redmond, Wash.-based developer will release eight patches for Windows, Office, Exchange, and MSN Messenger, at least half of which will be marked "critical," the company said late Thursday.

The patches will hit on the same day that Microsoft turns off its automatic blocking of Windows XP Service Pack 2 (SP2), which many companies applied last summer when the OS revision released.

According to information posted on Microsoft's Security Bulletin Advance Notification Web site, five of the eight fixes will be for Windows, and one each for Office, Exchange, and MSN Messenger.

Microsoft doesn't hand out details of its upcoming patches when it makes monthly pre-announcements, so the exact nature of the fixes are unknown. The Common Vulnerabilities and Exposures (CVE) database, however, lists a pair of unresolved Office vulnerabilities -- one with InfoPath, the other relating to bypassing policies that limit access to hidden drives by browsing from Office applications -- and one unpatched Exchange issue.

Third-party security firms give other hints of the upcoming patches, although most play it close to the vest. eEye Digital Security, for instance, is a frequent discoverer of Microsoft Windows vulnerabilities, but doesn't disclose details until patches are made public. It does, however, tally the number of vulnerabilities it's found that have not yet been fixed, and marks the number of days since it provided that information to the vendor.

eEye currently lists two vulnerabilities in Windows that it's tagged as "high severity." One was given to Microsoft on March 16, the second on March 29.

Microsoft also said that it would continue the practice of updating its Windows Malicious Software Removal Tool Tuesday by releasing a new version. Two other high-priority updates for Windows will also be posted to the Windows Update site, said Microsoft, although these are not security related.

We welcome your comments on this topic on our social media channels, or [contact us directly] with questions about the site.
Comment  | 
Print  | 
More Insights
The State of IT & Cybersecurity Operations 2020
The State of IT & Cybersecurity Operations 2020
Download this report from InformationWeek, in partnership with Dark Reading, to learn more about how today's IT operations teams work with cybersecurity operations, what technologies they are using, and how they communicate and share responsibility--or create risk by failing to do so. Get it now!
Commentary
The Best Way to Get Started with Data Analytics
John Edwards, Technology Journalist & Author,  7/8/2020
Slideshows
10 Cyberattacks on the Rise During the Pandemic
Cynthia Harvey, Freelance Journalist, InformationWeek,  6/24/2020
News
IT Trade Shows Go Virtual: Your 2020 List of Events
Jessica Davis, Senior Editor, Enterprise Apps,  5/29/2020
Register for InformationWeek Newsletters
Video
Current Issue
Key to Cloud Success: The Right Management
This IT Trend highlights some of the steps IT teams can take to keep their cloud environments running in a safe, efficient manner.
White Papers
Slideshows
Twitter Feed
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.
Sponsored Video
Flash Poll