It was said earlier that Microsoft will be releasing critical updates for Windows 8 to patch the recent flaws and vulnerabilities found by Vupen. So the upgrade has come and Microsoft has patched 19 vulnerabilities in Windows, Internet Explorer 9 (IE9), Excel and the .Net development framework, including four flaws in the just-released Windows 8 and its tablet version Windows RT.
Just like it was anticipated, this release brought six security patches released on Tuesday four of which are considered critical, one important, and one moderate and of the 19 vulnerabilities patched today, seven were tagged as critical.
Andrew Storms, director of security operations at nCircle Security said that:
“The IE9 [bulletin] is the one that should be patched first. It’s a drive-by, referring to the tactic that only requires hackers to trick users into browsing to a malicious website.
Despite the fact that it looks nasty, it’s not very realistic to expect working exploits, ticking off the many requirements for a successful attack, including the need to spoof a proxy server.”
Doing that with an unpatched copy of IE9 could result in a successful hijacking of a Windows 7 or Vista PC. IE9 only runs on those two operating systems. No other version of Internet Explorer, Including the latest IE10 were affected by MS12-071. IE10 is bundled with Windows 8 and Windows RT, and today shipped as a “Release Preview” for Windows 7. Andrew Storms put MS12-075 second on today’s to-do list.
Windows 8 and Windows RT harbored four of the 19 bugs, three of them critical and the fourth ranked important.
About the release and early bugs of Windows 8, Andrew Storms said that:
“I’m sure Microsoft is disappointed to have released Windows 8 in late October and have already issued patches for it. But truth be told, a lot of code is reused, and it shouldn’t be surprising to see bug fixes in Windows 8. Despite all the hype about newer platforms being the most secure, bugs will be found and bugs will be fixed.”
Note that you should download and install these latest patches at earliest to be on the safe side. If you are not sure about how to install these updates, follow this tutorial to see how you can check for updates in Windows 8.