Microsoft fixes 14 flaws in biggest patch day since February
In its biggest one-day security update since February, Microsoft Corp. today issued nine bulletins that patched 14 vulnerabilities in Office, Internet Explorer and every edition of Windows. Eight of the fixes were pegged as critical, the company's highest risk rating.
Faced with an overload of vulnerabilities -- including some in components that Microsoft has patched in the past -- researchers squabbled over which should get priority.
"I think six of these are equally important," said Andrew Storms, director of security operations at nCircle Network Security Inc.
"The GDI vulnerability is the most critical," said Amol Sarwate, the manager of Qualys Inc.'s vulnerability research lab.
