IT Pro is supported by its audience. When you purchase through links on our site, we may earn an affiliate commission. Learn more

Microsoft patch numbers hit record high

Patch Tuesday deluge could spawn 'Exploit Wednesday' as Microsoft vulnerabilities reach critical levels

The number of critical flaws in Microsoft software has hit a record high, offering a prime opportunity for hackers to exploit the backlog of unprotected vulnerabilities, according to security experts.

So far this year, the software giant has already addressed more critical vulnerabilities than in 2004 and 2005 combined, according to security specialist McAfee.

This news follows Microsoft's monthly security patch update, issued yesterday, which highlighted nine 'critical' and three 'important' browser, Windows and Office-related flaws that allow remote code execution.

"With over 120 new vulnerabilities across all platforms and applications reported last just last week, a rate of 6,000 new vulnerabilities per year!), clearly the rate of vulnerability discovery is still outpacing the number of patches being released," said Alan Bentley, managing director, EMEA, of patch management specialist Patchlink.

"Between the backlog of unpatched issues, and the chances of new vulnerabilities being discovered in adjacent areas, PatchLink sees a clear trend towards exploits coming out before patches are available - and 'Exploit Wednesday' is likely to become a reality sooner rather than later."

Microsoft hinted at the potential number of patches heading IT professionals' way last week in its Security Bulletin Advanced Notifications service. But it remained tight lipped about just how many would be deemed critical.

In light of the increased volume of patches, McAfee advised organisations to review deployment initiatives. Similarly, PatchLink said IT administrators should ensure their systems are up to date and ready to be patched as soon as patches are made available.

"Because security vulnerabilities are usually errors unintentionally put in code by programmers, the chances of finding a new vulnerability in an adjacent area of code or functionality is much more likely than your chances of identifying a brand new and unique vulnerability," said Bentley.

Featured Resources

Defending against malware attacks starts here

The ultimate guide to building your malware defence strategy

Free Download

Datto SMB cyber security for MSPs report

A world of opportunity for MSPs

Free Download

The essential guide to preventing ransomware attacks

Vital tips and guidelines to protect your business using ZTNA and SSE

Free Download

Medium businesses: Fuelling the UK’s economic engine

A Connected Thinking report

Free Download

Most Popular

Getting the best value from your remote support software
Advertisement Feature

Getting the best value from your remote support software

13 Mar 2023
Microsoft set to block emails from unsupported Exchange servers
Security

Microsoft set to block emails from unsupported Exchange servers

28 Mar 2023
What the UK can learn from the rest of the world when it comes to the shift to IP
Sponsored

What the UK can learn from the rest of the world when it comes to the shift to IP

20 Mar 2023