Microsoft announced Thursday it plans to push out four fixes -- two rated "critical" -- as part of its monthly security update next week.
The "critical" patches address vulnerabilities in Internet Explorer (IE) and Microsoft Exchange Server, while the fixes labeled "important" involve bugs in SQL Server and Visio, a drawing software product.
The IE issue, though, only is "critical" in Windows XP and Vista, while it is labeled "moderate" in Windows Server 2003 and 2008. The Exchange issue is "critical" for all supported editions: 2000, 2003 and 2007.
Corey Thomas, vice president of product management at vulnerability assessment firm Rapid7, said he would not be surprised if more Exchange vulnerabilities emerge, considering the latest version contains more features, such as calendaring functionality and RSS feeds.
"The more code and the more things that you have turned on that you're actively managing or trying to keep up with...the more configuration issues you have," he said.
See original article on scmagazineus.com
Four Microsoft fixes planned for Patch Tuesday
Microsoft is planning four patches -- two rated "critical -- in Tuesday's monthly security update.
Got a news tip for our journalists? Share it with us anonymously here.
Sponsored Whitepapers

See everything. Do more.

Lindentech Secures Digital Identity with Zero Trust and Microsoft Entra

Diamond IT Delivers GRC Transformation with Microsoft Purview

Linktech Powers Energy Trader’s Essential Eight Compliance in Just Eight Weeks

Byte Delivers Future-Ready IT: Transforming Endpoint Security and Productivity with a Cloud-First Strategy