Microsoft plans to release seven security bulletins next week, comprising a fix for a zero-day vulnerability in Windows that is already being utilized in cyber attacks. Microsoft was reported to have said on its website that the bulletins, part of Microsoft’s monthly patch cycle, are scheduled to give fixes for a hidden number of security flaws in Windows, Office, Exchange and BizTalk. The problem having an effect on BizTalk is also connected with ‘Capicom’, a designer module to include cryptography to apps.
The company said that each of the four product families is slated to get a hold of at least one “critical” update, Microsoft’s uppermost severity rating. Microsoft is making plans to issue two bulletins connected to problems in Windows and three linked to Office, with one left over for both Exchange and BizTalk.
Security tribulations tagged as critical typically might let a hacker intercept a bug-ridden system with very little, if any, action by the user. Microsoft’s updates will be included with a patch for a flaw in the Windows domain name system, or DNS. The security flaw has an effect on Windows 2000 Server and Windows Server 2003. Microsoft cautioned against the trouble previous month and said it was being utilized in limited attacks.
