X

'Critical' security fixes issued for Windows, IE, Exchange

On Patch Tuesday, Microsoft gives IT admins a heads-up on eight updates that address 23 vulnerabilities spread among Internet Explorer, Exchange, and Windows.

CNET News staff
 

IT admins were given a heads-up by Microsoft on Tuesday about eight security updates -- three rated "critical" and five "important" -- that tackle vulnerabilities in Internet Explorer, Exchange, and Windows.

The company's Security Bulletin Summary for August, published on this Patch Tuesday, notes that the most severe IE holes "could allow remote code execution if a user views a specially crafted Web page using Internet Explorer" and that the most serious Exchange Server weaknesses could similarly allow remote code execution "if a user previews a specially crafted file using Outlook Web App (OWA)."

In all, the eight updates address 23 vulnerabilities spread among IE, Exchange, and Windows.

You can check out the summary here, and watch an overview video from Microsoft here. The Microsoft Security Response Center's blog is here.

As for home users, the relevant software should update automatically unless you've switched off auto updates and set things to manual. There's more info here.