We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message
80,258 News Articles

Microsoft prepares 'critical' Office patches

Fixes for Windows, Office & .Net next week

Microsoft will release six security updates next week, the same number as in June, to patch problems in Windows, Office and the .Net Framework.

Three of the six bulletins scheduled for July 10 will be tagged ‘critical’ - Microsoft's highest rating - while two will be labelled ‘important’ and the sixth ranked ‘moderate’. Vulnerabilities fixed by five of the six updates, however, are remote code executable, an indicator that usually means the bugs are in the most dangerous classification.

Because Microsoft limits the information it posts in the advanced notification - even with the switch to a more detailed format that debuted last month - it's impossible to tell why two of the bulletins harbouring remote code executable flaws are rated as only ‘important.’

Of the three updates judged ‘critical’, one will fix Microsoft Excel, another will repair Windows 2000 Server and Windows Server 2003, and the third will patch .Net Framework 1.0, 1.1, and 2.0 in all currently supported versions of Windows - Vista included.

The pair of ‘important’ bulletins addresses issues in Publisher 2007 and Windows XP Professional SP2; the ‘moderate’ update, meanwhile, is limited to Windows Vista. July marks the fourth month in a row that Microsoft has posted patches for its newest operating system, which was released to the public in January.

Four non-security updates dubbed ‘high priority’ will also post on Tuesday via Windows Update, Microsoft Update and Windows Server Update Services (WSUS).

Some clues about the vulnerabilities likely to be patched next week can be gleaned from third-party sources. The bulletin focused on Publisher 2007 may be a fix for a bug reported to Microsoft in late February by eEye Digital Security, for example. Secunia, meanwhile, has three disclosed-but-unpatched flaws in .Net Framework 1.0 in its database, but none are ranked higher than ‘moderately critical’ by the Danish vulnerability tracker.

Assuming Microsoft releases all six updates, users will have faced 41 bulletins in the first half of 2007, two more than the 39 in the first seven months last year.


IDG UK Sites

Acer Aspire R11 review: Hands-on with the 360 laptop and tablet convertible

IDG UK Sites

Apple Watch release day: Twitter reacts

IDG UK Sites

See how Framestore created a shape-shifting, oil and metal based creature for Shell

IDG UK Sites

Apple Watch buying guide, price list & where to buy today: Which Apple Watch model, size, material,?......