Microsoft has released [1] an advance notification for the October patchday.
This month, 9 security bulletins are being published:
- 3 rated as critical allowing remote code execution in Internet Explorer, Windows and the .NET Framework
- 1 rated as moderate allowing an elevation of privilege in Office
- 5 rated as important allowing two remote code executions in Windows and Office ; two elevations of privileges in Windows as well as a security bypass in the Developer Tools
Microsoft fixes vulnerabilities affecting the following software:
- Internet Explorer version 6 to 11
- Office 2007 and 2010 as well as Office for Mac 2011
- SharePoint Server 2010
- Framework .NET 1.1 to 5.2
As well as the following Operating systems:
- Windows Vista
- Windows 7
- Windows 8 & 8.1
- Windows Server 2003
- Windows Server 2008
- Windows Server 2008 R2
- Windows Server 2012
- Windows Server 2012 R2
- Windows RT & RT 8.1
As usual a detailed alert along with corresponding security bulletins will be published by the ARGOS team on Microsoft patch day October 14th 2014. [2].
[1] https://technet.microsoft.com/en-us/library/security/ms14-oct
[2] https://argos.lexsi.com