Microsoft Patch Tuesday: Security Bulletin Advance Notification for June 2010
Microsoft Security Response Center has released a notification that Microsoft will issue 10 Security Bulletins addressing 34 vulnerabilities on Tuesday, June 8, 2010. Microsoft Technet will host a webcast to address customer questions about the security bulletins the following day.
The list of affected operating systems includes Windows 2000, Windows XP (32-bit and 64-bit), Windows Server 2003 (32-bit and 64-bit), Windows Vista (32-bit and 64-bit), Windows Server 2008 (32-bit and 64-bit), Windows 7 (32-bit and 64-bit), and Windows Server 2008 R2. In terms of the Microsoft Office suites, all supported versions are affected on both Windows and Mac OS X. Three of the vulnerabilities are rated “Critical” and seven are rated “Important.” At least two of the 10 patches will need a restart. February’s Internet Explorer flaw and April’s SharePoint vulnerability will both be patched this month.
The exact breakdown of the security bulletin is as follows:
- Bulletin 1: Critical (Remote Code Execution), Windows
- Bulletin 2: Critical (Remote Code Execution), Windows
- Bulletin 3: Critical (Remote Code Execution), Windows, Internet Explorer
- Bulletin 4: Important (Elevation of Privilege), Windows
- Bulletin 5: Important (Remote Code Execution), Office
- Bulletin 6: Important (Elevation of Privilege), Windows
- Bulletin 7: Important (Remote Code Execution), Office
- Bulletin 8: Important (Elevation of Privilege), Office, Microsoft Server Software
- Bulletin 9: Important (Remote Code Execution), Windows
- Bulletin 10: Important (Tampering), Windows
Along with these patches, Microsoft is also planning to release the following on Patch Tuesday:
- One or more non-security, high-priority updates on Windows Update (WU) and Windows Server Update Services (WSUS)
- One or more non-security, high-priority updates on Microsoft Update (MU) and WSUS
- An updated version of the Microsoft Windows Malicious Software Removal Tool on Windows Update, Microsoft Update, Windows Server Update Services, and the Microsoft Download Center
Microsoft has been known to rush patches or to pull them if necessary, so this information is subject to change.
