Microsoft will match its record for patches – first set in December last year – this coming Patch Tuesday when it issues 17 "bulletins" for 64 vulnerabilities.
The patches will be issued for Windows, Office, Internet Explorer, Windows graphics framework, among others.
Microsoft has listed nine of the patches as "critical" with the other eight tagged as "important".
My name is Pete Voss, and I'm a senior response communications manager with Microsoft Trustworthy Computing. I'll be joining the rest of the team on the MSRC blog and @MSFTSecResponse Twitter handle to help provide you with the latest information and guidance for Microsoft security.
"Today, we're providing advanced notification on the release of 17 security bulletins, nine rated Critical and eight rated Important," says Pete Voss, senior response communications manager at Microsoft Trustworthy Computing. "This month's bulletin release will address 64 vulnerabilities across Microsoft Windows, Microsoft Office, Internet Explorer, Visual Studio, .NET Framework and GDI+.
This month we'll be closing some issues that Microsoft has already previously spoken to, including the SMB Browser (Critical) issue publicly disclosed 15 February. Microsoft assessed the situation and reported that although the vulnerability could theoretically allow Remote Code Execution, that was extremely unlikely. To this day, we have seen no evidence of attacks.
"We are also planning a fix for the MHTML vulnerability in Windows, rated Important. We alerted people to this issue with Security Advisory 2501696 (including a Fix-It that fully protected customers once downloaded) back in late January. In March, we updated the advisory to let people know we were aware of limited, targeted attacks."