Microsoft to patch three critical flaws in May

By
Follow google news

Patches will send IT admins scrambling.

Microsoft will release three critical patches on Patch Tuesday tomorrow.

Microsoft to patch three critical flaws in May

The patches would fix remote code execution flaws in Office, Windows, the .NET Framework and Silverlight.

Four other patches were rated important and would fix remote code execution flaws in Office and elevation of privilege vulnerabilities in Windows.

Qualys CTO said Wolfgang Kandek the bulletins would be the highest-priority for IT admins.

"Bulletin one also affects Office for the Macintosh, but is rated only important on that platform," he wrote.

"Bulletins four and five will also cover Office, and while they are ranked as important, they provide fixes for remote code execution vulnerabilities.

"They should be considered a high priority as bulletin four affects the free Excel viewer and bulletin five the free Visio viewer, giving us a clue as to what file formats contain the weaknesses.”

Lumension security and forensic analyst Paul Henry said "disruptive restarts" and the wide range of platforms impacted will "have IT teams scrambling to accomplish their flaw remediation tasks".

“Pending the official release from Microsoft on Tuesday, of greatest concern are critical bulletins two and three, which impact both legacy and current-generation operating systems.”

This article originally appeared at scmagazineuk.com

Got a news tip for our journalists? Share it with us anonymously here.
Copyright © SC Magazine, US edition
Tags:

Most Read Articles

Services Australia to tap law enforcement data for staff security

Services Australia to tap law enforcement data for staff security

Vic Education database breached via school's network

Vic Education database breached via school's network

Microsoft patches single-click Copilot data stealing attack

Microsoft patches single-click Copilot data stealing attack

Microsoft releases fix for flawed January security update

Microsoft releases fix for flawed January security update

Log In

  |  Forgot your password?