Microsoft posted an advanced notification on the release of 17 security bulletins, “nine rated Critical and eight rated Important.” This month’s bulletin release will “address 64 vulnerabilities across Microsoft Windows, Microsoft Office, Internet Explorer, Visual Studio, .NET Framework and GDI+.”
“This month we’ll be closing some issues that Microsoft has already previously spoken to, including the SMB Browser (Critical) issue publicly disclosed Feb. 15. Microsoft assessed the situation and reported that although the vulnerability could theoretically allow Remote Code Execution, that was extremely unlikely. To this day, we’ve seen no evidence of attacks,” noted Microsoft.
“We’re also planning a fix for the MHTML vulnerability in Windows, rated Important. We alerted people to this issue with Security Advisory 2501696 (including a Fix-It that fully protected customers once downloaded) back in late January.
In March, we updated the advisory to let people know we were aware of limited, targeted attacks.”
The bulletin release scheduled for the second Tuesday of the month, April 12, at approximately 10 a.m. PDT.