Microsoft confirms record Patch Tuesday
Next week's Patch Tuesday will fix 64 vulnerabilities in 17 security bulletins.
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
You are now subscribed
Your newsletter sign-up was successful
Microsoft will fix more vulnerabilities than any previous Patch Tuesday when it issues its monthly update list next week.
The Redmond giant said it would fix 64 vulnerabilities in 17 security bulletins on 12 April across various Microsoft products, including all versions of Windows.
Nine bulletins were rated as critical and the remaining eight ranked as important.
Notably, Microsoft has chosen to fix a zero-day MIME HTML (MHTML) vulnerability affecting Internet Explorer, which was used in targeted attacks.
In March, Google warned the vulnerability, initially reported by Microsoft in January, had been exploited in politically motivated attacks and hit "another popular social site."
The bug in MHTML a protocol used by applications to render certain kinds of documents and bring together different content onto one HTML file - was publicly disclosed back in January.
"This is a huge update and system administrators should plan for deployment as all windows systems including Server 2008 and Windows 7 are affected by critical bulletins," said Amol Sarwate, manager at the Qualys Vulnerability Research Lab.
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
"Frequently used office applications like Excel 2003 through 2010 and PowerPoint 2002 through 2010 are also affected."
The previous record Patch Tuesday was issued in October when 49 vulnerabilities were fixed in 16 bulletins.
Head here to see the advance notification for next week's Patch Tuesday.
Tom Brewster is currently an associate editor at Forbes and an award-winning journalist who covers cyber security, surveillance, and privacy. Starting his career at ITPro as a staff writer and working up to a senior staff writer role, Tom has been covering the tech industry for more than ten years and is considered one of the leading journalists in his specialism.
He is a proud alum of the University of Sheffield where he secured an undergraduate degree in English Literature before undertaking a certification from General Assembly in web development.
-
Security agencies issue warning over critical Cisco Catalyst SD-WAN vulnerabilityNews Threat actors have been exploiting the vulnerability to achieve root access since 2023
-
Millions of developers could be impacted by flaws in Visual Studio Code extensions – here's what you need to know and how to protect yourselfNews The VS Code vulnerabilities highlight broader IDE security risks, said OX Security
-
CVEs are set to top 50,000 this year, marking a record high – here’s how CISOs and security teams can prepare for a looming onslaughtNews While the CVE figures might be daunting, they won't all be relevant to your organization
-
Microsoft patches six zero-days targeting Windows, Word, and more – here’s what you need to knowNews Patch Tuesday update targets large number of vulnerabilities already being used by attackers
-
Experts welcome EU-led alternative to MITRE's vulnerability tracking schemeNews The EU-led framework will reduce reliance on US-based MITRE vulnerability reporting database
-
Veeam patches Backup & Replication vulnerabilities, urges users to updateNews The vulnerabilities affect Veeam Backup & Replication 13.0.1.180 and all earlier version 13 builds – but not previous versions.
-
Two Fortinet vulnerabilities are being exploited in the wild – patch nowNews Arctic Wolf and Rapid7 said security teams should act immediately to mitigate the Fortinet vulnerabilities
-
Everything you need to know about Google and Apple’s emergency zero-day patchesNews A serious zero-day bug was spotted in Chrome systems that impacts Apple users too, forcing both companies to issue emergency patches


