Microsoft Releases Record Security Update: 974 Vulnerabilities Fixed

Microsoft released the largest security update package in the company’s history in September. As part of its latest Patch Tuesday, the company fixed 974 vulnerabilities across Windows and other Microsoft products. For comparison, Microsoft addressed 421 vulnerabilities in August and 622 in July.

Particular attention has been drawn to two vulnerabilities that were already being exploited by attackers before the updates were released. One of them is related to Windows Advanced Local Procedure Call (ALPC) and could allow attackers to gain system privileges. The other affects the Windows Update Stack component and also creates a risk of gaining elevated system privileges.

Microsoft also addressed several issues in Exchange Server. One of them could potentially allow a remote attacker to execute malicious code through a specially crafted file sent via email. This is particularly important for organizations that operate their own Exchange servers.

Why Does It Matter?

The large number of security fixes means that users should install the updates as soon as possible. This is especially important for Windows computers used to access corporate systems, email, or sensitive data.

Cybersecurity experts also point out that modern attacks can combine several vulnerabilities at once. Therefore, even if an individual security issue does not appear critical, keeping the entire system up to date remains one of the simplest ways to reduce the risk of an attack.

Windows users should check Windows Update and make sure that the latest available updates have been installed. Businesses should also check for updates to their servers and other corporate software.