Microsoft Advance Notification for October 2013

It is on a monthly schedule but for some reason Microsoft's Patch Tuesday sneaks up on me every month. Tomorrow, Microsoft is expected to push out eight new bulletins. This is quickly becoming a big patch period with Adobe releasing one patch along with Microsoft, Cisco releasing eight patches to IOS in September and Oracle's CPU expected within the next week or so.

As for Microsoft, the first bulletin will be a critical update to Internet Explorer, most likely to cover the zero-day that was found in the wild and for which Microsoft issued a fix-it for last month. However, since the vulnerability's inclusion in Metasploit it has become much more wide spread.

The next three bulletins are also all rated critical and impact .NET Framework or Windows itself including XP, 8 and RT. The next three bulletins are rated Important. Two of which are file format vulnerabilities resulting in remote code execution in MS Office, specifically Excel and Word. The third bulletin is an issue with SharePoint Server that could also result in remote code execution.

The final bulletin of the eight this month is an information disclosure vulnerability found in Silverlight.

Look for our blog post tomorrow that will have the details for all these bulletins.