MS Patch Tuesday Heads-up: 10 Bulletins, 34 Vulnerabilities

Via Threatpost.com -

Microsoft's Patch Tuesday this month will be a big one: 10 bulletins fixing 34 vulnerabilities in Windows, Office and Internet Explorer.

Three of the 10 bulletins will be rated "critical," Microsoft's highest severity rating. The flaws addressed in those bulletins typically expose users to remote code execution attacks.

Here are the basic details on what's coming next Tuesday (June 8, 2010):

Two bulletins, both with a severity rating of Important, affect Microsoft Office.

One bulletin, again with a severity rating of Important, affects both Windows and Office.

One bulletin, with a severity rating of Critical, affects Internet xplorer.

• Six of the bulletins affect Windows; of those, two carry a Critical severity rating and four are rated Important.
• Two bulletins, both with a severity rating of Important, affect Microsoft Office.
• One bulletin, again with a severity rating of Important, affects both Windows and Office.
• One bulletin, with a severity rating of Critical, affects Internet Explorer.

Microsoft confirmed that this month's patch batch will provide cover for two publicly known issues: an elevation of privilege flaw in Microsoft SharePoint that could lead to cross-site scripting attacks and an information disclosure hole in Internet Explorer.

Some of these vulnerabilities affect all versions of Windows, including the newest Windows 7 and Windows Server 2008 R2.