Microsoft Fixes Critical Windows Bluetooth Bug in July Patch Tuesday

Microsoft has patched a critical vulnerability in Windows 7 and Windows Vista related to the Bluetooth stack in the operating system. The bug is the lone critical vulnerability fixed in today’s Patch Tuesday release, and Microsoft officials said it’s unlikely that it can be used for remote code...

Microsoft to Patch 22 Flaws on July Patch Tuesday

Microsoft’s Patch Tuesday release next week will comprise four bulletins, one of which is rated critical, covering vulnerabilities in numerous versions of Windows as well as Visio 2003. The most serious of the vulnerabilities is a critical flaw affecting Windows 7 and Windows Vista. In total,...

Microsoft Ships 16 Fixes in June's Patch Tuesday

Microsoft patched nine critical vulnerabilities and seven important vulnerabilities, pushing out a total of 16 patches in the June edition of Patch Tuesday. One of the bugs patched was used to compromise Internet Explorer during the Pwn2Own contest this year. Four of the critical vulnerabilities...

Microsoft Releases Patch Tuesday Fixes for Windows Server and PowerPoint !

Microsoft Releases Patch Tuesday Fixes for Windows Server and PowerPoint ! Microsoft addressed two security bulletins in May's Patch Tuesday release. Despite its small size, security experts said administrators should apply the fixes immediately as they addressed significant threats. Microsoft...

May Patch Tuesday Fixes Three Remote Microsoft Bugs

The May 2011 edition of Microsoft’s Patch Tuesday is a relatively modest one with the software giant posting just two bulletins addressing bugs that could allow for remote code execution, but only one of which is rated critical. The first bulletin, MS11-035, addresses a privately reported critica...

April Patch Tuesday Fixes Critical IE, SMB Bugs

Microsoft has released its April Patch Tuesday fixes, a large group of patches that includes updates for several critical holes in Internet Explorer as well as a patch that finally fixes the SMB client bug that disclosed publicly in February. The most critical of the 17 bulletins that Microsoft...

Microsoft Planning 17 Bulletins to Fix 64 Bugs in April Patch Tuesday

Microsoft is planning a huge Patch Tuesday for April, alerting customers that the company will issue 17 bulletins next week to fix a total of 64 vulnerabilities. Nine of the bulletins have a maximum severity rating of critical. The bulletins will cover a range of Microsoft products, including...

Microsoft Releases Zero IE8 Security Updates Before "Pwn2Own" !

Microsoft has opted not to release any patches to its Internet Explorer 8 browser prior to this year's Pwn2Own browser exploit challenge, which is set to run from March 9 to March 11 at the CanSecWest security conference. There's been no indication as to why Microsoft's not making one last effort...

Microsoft Ships 12 Bulletins in February's Patch Tuesday

Microsoft addressed 22 flaws with 12 separate bulletins in February’s edition of Patch Tuesday, including three bulletins that were rated critical with the remaining nine rated as important. Among the programs affected are Microsoft Windows, Internet Explorer, Office, Visual Studio, and IIS. The...

Microsoft Readies 'Critical' Windows, IE Patches

As part of this month’s Patch Tuesday schedule, Microsoft plans to ship a dozen bulletins with fixes for 22 vulnerabilities, some serious enough to allow hackers complete access to a vulnerable Windows machine. According to Microsoft’s advance notice, three of the 12 bulletins will carry be rated...

2011's First Patch Tuesday Fixes Three Windows Flaws

Microsoft released just two bulletins in this month’s edition of patch Tuesday. Both bulletins cover vulnerabilities in Windows, and Microsoft is recommending that users install the critical fix for the two vulnerabilities covered in MS11-02 immediately. In addition to the patches for three total...

Ten Years Later, Rethinking Microsoft's Vuln Ratings

Microsoft’s vulnerability Severity Rating System is closing in on its tenth birthday. While the security landscape has been transformed during that time, the Ratings have endured. But do they still work? Threatpost asked prominent vulnerability researchers to give us their opinion. You may be...

After A Decade, Time To Rethink Microsoft's Vulnerability Ratings?

Security Experts will tell you that one year is a lifetime in the world of online threats and attacks. But eight years after Microsoft introduced its innovative severity rating system for software vulnerability, the company says its original definitions of what makes a software hole important sti...

MS Patch Tuesday Heads-Up: 17 Bulletins, 40 Vulnerabilities

Microsoft is planning another massive Patch Tuesday this month: 17 bulletins with fixes for 40 security vulnerabilities. The December batch of patches will cover security holes in Microsoft Windows, Office, Internet Explorer, SharePoint and Exchange, according to an advance notice posted Thursday...

Inside Patch Tuesday at the Microsoft Security Response Center

In this video, Dustin Childs of the Microsoft Security Response Center gives an inside look at what it’s like in Redmond on Patch Tuesday and what goes into the efforts that Microsoft makes to get fixes out every month. View the video at Microsoft’s Security TechCenter...

Oracle Plans Monster Patch Tuesday Release

Oracle will join Microsoft on next week’s Patch Tuesday freight train and it will be another mega-release. The database server giant says in a pre-release announcement that it will patch a whopping 81 vulnerabilities, some serious enough to be remotely exploitable without authentication over a...

This Week In Security: Stuxnet Redux, Gmail Security and a Monster Patch Tuesday

The Stuxnet buzz continued this week, Adobe took a few steps toward better security and Microsoft announced plans for its largest Patch Tuesday ever. But it wasn’t just Microsoft, Adobe and everyone’s favorite worm grabbing headlines. Read on for the full week in review. Not going away anytime...

Microsoft Plans Record-Breaking Patch Tuesday

This month’s batch of security patches from Microsoft will be a record-breaking one: 16 bulletins addressing a whopping 49 security vulnerabilities. According to the company’s advance notice, four of the 16 bulletins will be rated “critical,” Microsoft’s highest severity rating. Microsoft rates a...

(CORE-2010-0701) Adobe Acrobat Reader Acrord32.dll Use After Free Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ Adobe Acrobat Reader Acrord32.dll Use After Free Vulnerability 1. Advisory Information Title: Adobe Acrobat Reader Acrord32.dll Use After Free Vulnerability Advisory Id:...

Microsoft plugs Eleven Vulnerabilities with Patch Tuesday Update

Microsoft issued nine security bulletins on Tuesday, fixing eleven vulnerabilities in products ranging from Windows, to Microsoft Office, to Internet Information Services. The patch release, part of the company’s monthly Patch Tuesday release included a fix for a previously undisclosed...