/>
X
Innovation

Patch Tuesday heads-up: Critical MS Office security holes

The November Patch Tuesday will feature just three bulletins with fixes for a total of 11 documented vulnerabilities.
Written by Ryan Naraine, Contributor on

After last month's record-breaking security patch release, Microsoft is offering a November respite.

The November Patch Tuesday will feature just three bulletins with fixes for a total of 11 documented vulnerabilities.  One of the bulletins will be rated "critical," Microsoft's highest severity rating.

According to an advance notice from Redmond, two of the bulletins will address security holes in Microsoft Office, the widely deployed desktop productivity suite.

The third bulletin, rated important, will address security flaws in the Microsoft Forefront Unified Access Gateway product.

The Microsoft Office update is noteworthy because it is rare to see an Office update with a "critical rating."

Qualys CTO Wolfgang Kandek points out that most vulnerabilities on the Office suite are categorized as "Important" because they typically require user interaction to get a successful exploitation.

"Critical" here indicates a vulnerability that can be used to take control of the target machine without user interaction, such as MS10-064, where visualizing an e-mail in Outlook's preview pane was sufficient to trigger the flaw," Kandek said.

The patches are due for release around 2PM EST on November 10, 2010.

Editorial standards

Related

The 16 best Cyber Monday deals under $30 still available
Amazon Fire TV Stick 4K

The 16 best Cyber Monday deals under $30 still available

Apple names the 16 best apps and games of 2022, with BeReal taking top honors
App Store icon

Apple names the 16 best apps and games of 2022, with BeReal taking top honors

The 38 best Cyber Monday deals at Costco still available
LG 65" Class - QNED80 Series

The 38 best Cyber Monday deals at Costco still available