Microsoft to release another record security update
Microsoft Patch Tuesday to see record number of security fixes
Microsoft is set to release another record ‘Patch Tuesday' tomorrow, with the 17 updates launching to patch 40 vulnerabilities in Windows, Internet Explorer (IE), Office, SharePoint and Exchange.
Microsoft had already released one record update in August of this year, and this month's release takes the total bulletin count and number of vulnerabilities to record levels as well, with 106 updates fixing 266 vulnerabilities.
Mike Reavey of the MSRC attributed the rise in the number of fixes to the length of time that it supports products and better reporting of vulnerabilities.
Reavey wrote in the official MSRC blog: "This isn't really surprising when you think about product life cycles and the nature of vulnerability research. Microsoft supports products for up to ten years. Vulnerability research methodologies, on the other hand, change and improve constantly. Older products meeting newer attack methods, coupled with overall growth in the vulnerability marketplace, result in more vulnerability reports. Meanwhile, the percentage of vulnerabilities reported to us cooperatively continues to remain high at around 80%; in other words, for most vulnerabilities we're able to release a comprehensive security update before the issue is broadly known."
The updates will fix two bugs that have already been exploited, with two of the bulletins rated critical, 14 rated Important, and one rated Moderate.