Four security updates due from Microsoft next week
Microsoft plans to patch critical flaws in its Internet Explorer and Microsoft Exchange Server software next week.
In total, the company will issue four security updates, including two critical fixes as well as patches for Microsoft SQL Server and its Microsoft Office Visio, the company said in a note published on its Web site Thursday. Although hackers could theoretically exploit bugs in all of these products to run unauthorized software, Microsoft rates the SQL Server and Office flaws as less severe.
The SQL Server flaw may be a known issue that Microsoft acknowledged late last year. Security experts had been expecting Microsoft to patch this flaw in February. According to the researcher who disclosed the SQL issue, Microsoft has known about it since April and wrote its initial patch for the bug back in September.