MICROSOFT has released its latest monthly security update, addressing 23 security vulnerabilities with eight different bulletins.
Of the eight bulletins, five have been deemed 'critical', the highest of the company's security alert levels.
If exploited, each of the five could allow an attacker to remotely execute code on a targeted system.
Among the fixes is a bulletin to address a pair of flaws in Excel, both of which are being actively targeted by cyber criminals.
Other critical fixes include updates to address flaws in Office, DirectX, Internet Explorer and the Windows HTTP Services component.
Additionally, Microsoft issued a fix for ISA Server and Forefront Threat Management gateway, along with a patch to prevent 'token kidnapping' attacks. Each of those bulletins are rated as 'important'.
McAfee Avert Labs senior director of research and communications Dave Marcus said this was the largest batch of security updates Microsoft release this year, including urgent fixes for vulnerabilities that are already being exploited.
Add a comment